| | site-map | e-mail

User:

Guest

Name: Password:

www.center.hu / Archive / Security news / june, 2006 / Local vulnerabilities in Sun Grid Engine 

Local vulnerabilities in Sun Grid Engine

Local vulnerabilities in Sun Grid Engine

Madrid, June 9, 2006 - Sun has reported vulnerabilities in Sun Grid Engine, that could allow a local user to cause denial of service conditions or even access the grid service without authorization.

The flaw stems from incorrect user authentication and authorization, which could allow a local user to shut down the grid service or use it even if access was denied to them.

More specifically, the problem lies in implementation of the CSP (Certificate Security Protocol) protocol. Vulnerable versions are Sun Grid Engine 5.3 and Sun N1 Grid Engine 6.0 on all platforms (SPARC, x86, Linux, HP-UX, Windows, AIX, IRIS and MacOS).

Sun has published updates for all vulnerable products and versions.
Given the great variety of platforms, it is advisable to visit the Sun article, available at:
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102321-1


Oxygen3 24h-365d
by Panda Software

2006-06-09 15:53

Back