CVE-2006-2930 - Unspecified vulnerability in Sun Grid Engine 5.3 and Sun N1 Grid Engine 6.0, when configured in Cert

CVE-2006-2930

Summary

Unspecified vulnerability in Sun Grid Engine 5.3 and Sun N1 Grid Engine 6.0, when configured in Certificate Security Protocol (CSP) Mode, allows local users to shut down the grid service or gain access, even if access is denied.

References

http://secunia.com/advisories/20518
http://securitytracker.com/id?1016247
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102321-1
http://www.vupen.com/english/advisories/2006/2215
https://exchange.xforce.ibmcloud.com/vulnerabilities/26997

Vulnerable Configurations

cpe:2.3:a:sun:grid_engine:5.3:*:*:*:*:*:*:*
cpe:2.3:a:sun:grid_engine:5.3:*:*:*:*:*:*:*
cpe:2.3:a:sun:n1_grid_engine:6.0:*:*:*:*:*:*:*
cpe:2.3:a:sun:n1_grid_engine:6.0:*:*:*:*:*:*:*

CVSS

Base:	4.6 (as of 20-07-2017 - 01:31)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:P/A:P

refmap via4

sectrack	1016247
secunia	20518
sunalert	102321
vupen	ADV-2006-2215
xf	sge-csp-authentication-bypass(26997)

Last major update

20-07-2017 - 01:31

Published

09-06-2006 - 10:02

Last modified

20-07-2017 - 01:31