CVE-2004-0317 Buffer overflow in eauth in Load Sharing Facility 4.x, 5.x, and 6.x allows local users or remote attackers within the LSF cluster to cause a denial of service (segmentation fault) and possibly execute...
HighCVSS 10.0
EPSS 4.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in eauth in Load Sharing Facility 4.x, 5.x, and 6.x allows local users or remote attackers within the LSF cluster to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long LSF_From_PC parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| platform lsf | = 4.0 | No fix listed |
| platform lsf | = 4.2 | No fix listed |
| platform lsf | = 5.0 | No fix listed |
| platform lsf | = 5.1 | No fix listed |
| platform lsf | = 6.0 | No fix listed |
References
- 20040223 Lam3rZ Security Advisory #1/2004: LSF eauth vulnerability leads to remote code execution mailing-list
- 9719 patch vdb-entry vendor-advisory
- lsf-eauth-execute-code(15282) vdb-entry