漏洞信息详情
Sun Grid Engine 未明漏洞
漏洞简介
Sun Grid Engine (SGE) 6.0u7_1之前版本中的rsh实用程序存在未明漏洞,本地用户可以通过可能与命令行参数有关的未明向量获取特权并执行任意代码。
漏洞公告
目前厂商已经发布了升级补丁以修复这个安全问题,补丁下载链接:
Sun Grid Engine 6.0
Sun 121956-01
SPARC Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121956-01-1
Sun 121957-01
SPARC Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121957-01-1
Sun 121960-01
SPARC Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121960-01-1
Sun 121961-01
SPARC Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121961-01-1
Sun Grid Engine 6.0 Update1
Sun 121958-01
x86 Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121958-01-1
Sun 121959-01
x86 Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121959-01-1
Sun 121962-01
x86 Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121962-01-1
Sun 121963-01
x86 Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121963-01-1
Sun 121964-01
Linux
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121964-01-1
Sun 121965-01
Linux
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121965-01-1
Sun 121966-01
AIX
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121966-01-1
Sun 121967-01
AIX
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121967-01-1
Sun 121968-01
MAC OS
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121968-01-1
Sun 121969-01
HP-UX
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121969-01-1
Sun 121970-01
IRIX
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121970-01-1
Sun 121971-01
Windows
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -121971-01-1
Sun Grid Engine 5.3 32-bit SPARC
Sun 113136-06
SPARC Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -113136-06-1
Sun 113139-07
SPARC Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -113139-07-1
Sun 113849-06
SPARC Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -113849-06-1
Sun 113855-06
SPARC Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -113855-06-1
Sun Grid Engine 5.3 64-bit SPARC
Sun 113137-06
SPARC Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -113137-06-1
Sun 113140-07
SPARC Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -113140-07-1
Sun 113850-06
SPARC Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -113850-06-1
Sun 113856-06
SPARC Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -113856-06-1
Sun Grid Engine 5.3 Sun Linux
Sun 113138-07
x86 Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -113138-07-1
Sun 113851-06
x86 Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -113851-06-1
Sun 113852-06
Linux
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -113852-06-1
Sun 113900-05
Linux
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -113900-05-1
Sun 116658-03
x86 Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116658-03-1
Sun 116659-03
x86 Platform
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -116659-03-1
Sun 117293-02
Linux
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -117293-02-1
参考网址
来源: VUPEN
名称: ADV-2006-0308
链接:http://www.frsirt.com/english/advisories/2006/0308
来源: SECUNIA
名称: 18580
链接:http://secunia.com/advisories/18580
来源: gridengine.sunsource.net
链接:http://gridengine.sunsource.net/project/gridengine/60patches.txt
来源: XF
名称: sge-rsh-gain-privileges(24281)
链接:http://xforce.iss.net/xforce/xfdb/24281
来源: BID
名称: 16366
链接:http://www.securityfocus.com/bid/16366
来源: SECTRACK
名称: 1015531
链接:http://securitytracker.com/id?1015531
受影响实体
- Sun Grid_engine:6.0:Update7<!--2000-1-1-->
- Sun Grid_engine:6.0:Update5<!--2000-1-1-->
- Sun Grid_engine:6.0:Update4<!--2000-1-1-->
- Sun Grid_engine:6.0:Update3<!--2000-1-1-->
- Sun Grid_engine:6.0:Update1<!--2000-1-1-->
补丁
暂无
还没有评论,来说两句吧...