int(2283)

Vulnerability Bulletins


Vulnerabilidad en Sun Grid Engine

Vulnerability classification

Property Value
Confidence level Oficial
Impact Compromiso Root
Dificulty Experto
Required attacker level Acceso remoto con cuenta

System information

Property Value
Affected manufacturer UNIX
Affected software Sun N1 Grid Engine 6
Sun Grid Engine 5.3

Description

Se ha descubierto una vulnerabilidad en Sun Grid Engine 5.3 y Sun N1 Grid Engine 6. La vulnerabilidad reside en el binario rsh.

La explotación de esta vulnerabilidad podría permitir a un atacante local obtener privilegios de root.

Solution



Actualización de software

Sun Grid Engine

Solaris / SPARC
Sun Grid Engine 5.3 (32-bit Solaris) - patch 113136-06
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-113136-06-1
Sun Grid Engine 5.3 (64-bit Solaris) - patch 113137-06
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-113137-06-1
Sun Grid Engine 5.3 (32-bit Solaris) NON-Solaris Package format - patch 113849-06
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-113849-06-1
Sun Grid Engine 5.3 (64-bit Solaris) NON-Solaris Package format - patch 113850-06
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-113850-06-1
Sun Grid Engine Enterprise Edition 5.3 (32-bit Solaris) - patch 113139-07
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-113139-07-1
Sun Grid Engine Enterprise Edition 5.3 (64-bit Solaris) - patch 113140-07
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-113140-07-1
Sun Grid Engine Enterprise Edition 5.3 (32-bit Solaris) NON-Solaris Package format - patch 113855-06
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-113855-06-1
Sun Grid Engine Enterprise Edition 5.3 (64-bit Solaris) NON-Solaris Package format - patch 113856-06
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-113856-06-1
N1 Grid Engine 6.0 (32-bit Solaris) - patch 121956-01
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-121956-01-1
N1 Grid Engine 6.0 (64-bit Solaris) - patch 121957-01
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-121957-01-1
N1 Grid Engine 6.0 (32-bit Solaris) NON-Solaris Package format - patch 121960-01
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-121960-01-1
N1 Grid Engine 6.0 (64-bit Solaris) NON-Solaris Package format - patch 121961-01
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-121961-01-1

Solaris / x86
Sun Grid Engine 5.3 - patch 113138-07
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-113138-07-1
Sun Grid Engine 5.3 NON-Solaris Package format - patch 113851-06
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-113851-06-1
Sun Grid Engine Enterprise Edition 5.3 - patch 116658-03
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-116658-03-1
Sun Grid Engine Enterprise Edition 5.3 NON-Solaris Package format - patch 116659-03
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-116659-03-1
N1 Grid Engine 6.0 - patch 121958-01
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-121958-01-1
N1 Grid Engine 6.0 NON-Solaris Package format - patch 121962-01
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-121962-01-1
N1 Grid Engine 6.0 (x64) - patch 121959-01
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-121959-01-1
N1 Grid Engine 6.0 (x64) NON-Solaris Package format - patch 121963-01
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-121963-01-1

Linux
Sun Grid Engine 5.3 - patch 113852-06
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-113852-06-1
Sun Grid Engine Enterprise Edition 5.3 - patch 113900-05
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-113900-05-1
Sun Grid Engine Enterprise Edition 5.3 (x64) - patch 117293-02
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-117293-02-1
N1 Grid Engine 6.0 - patch 121964-01
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-121964-01-1
N1 Grid Engine 6.0 (x64) - patch 121965-01
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-121965-01-1

Windows
N1 Grid Engine 6.0 - patch 121971-01
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-121971-01-1

HP-UX
N1 Grid Engine 6.0 - patch 121969-01
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-121969-01-1

AIX
N1 Grid Engine 6.0 (for AIX 4.3) - patch 121966-01
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-121966-01-1
N1 Grid Engine 6.0 (for AIX 5.1) - patch 121967-01
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-121967-01-1

MAC OS
N1 Grid Engine 6.0 - patch 121968-01
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-121968-01-1

IRIX
N1 Grid Engine 6.0 (for IRIX 6.5) - patch 121970-01
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-121970-01-1

Standar resources

Property Value
CVE CVE-2006-0408
BID 16366

Other resources

Sun(sm) Alert Notification 102268
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102268-1

Version history

Version Comments Date
1.0 Aviso emitido 2006-03-29
Ministerio de Defensa
CNI
CCN
CCN-CERT