Vulnerability in Platform Lsadmin
CVE-2003-0337
The ckconfig command in lsadmin for Load Sharing Facility (LSF) 5.1 allows local users to execute arbitrary programs by modifying the LSF_ENVDIR environment variable to reference an alternate lsf.conf file, then modifying LSF_SERVERDIR to point to a malicious lim program, which lsadmin then executes.
EPSS: 0.003 (24.5th percentile) — read the EPSS interpretation.
Affected products
- Platform Lsadmin — versions 5.1
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)