Sun GridEngine 5.3 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys, a similar vulnerability to CVE-2008-5077.
Search vulnerabilities
CVE-2009-0046
CVSS 2.0 · 5.0 Medium
EPSS 1.2%
KEV · Not listed
Vendors
Products
CVE-2006-0408
rsh utility in Sun Grid Engine (SGE) before 6.0u7_1 allows local users to gain privileges and execute arbitrary code via unspecified vectors, possibly involving command line arguments.
CVSS 2.0 · 7.2 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2006-1506
Unspecified vulnerability in rsh in Sun Microsystems Sun Grid Engine 5.3 before 20060327 and N1 Grid Engine 6.0 before 20060327 allows local users to gain root privileges.
CVSS 2.0 · 7.2 High
EPSS < 1%
KEV · Not listed
Vendors
Products
CVE-2006-2930
Unspecified vulnerability in Sun Grid Engine 5.3 and Sun N1 Grid Engine 6.0, when configured in Certificate Security Protocol (CSP) Mode, allows local users to shut down the grid service or gain access, even if access is denied.
CVSS 2.0 · 4.6 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.