CVE-2003-0337: Medium severity Platform Lsadmin vulnerability
The ckconfig command in lsadmin for Load Sharing Facility (LSF) 5.1 allows local users to execute arbitrary programs by modifying the LSFENVDIR environment variable to reference an alternate lsf.conf file, then modifying LSFSERVERDIR to point to a malicious lim program, which lsadmin then executes.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Ensure the LSF_ENVDIR environment variable is removed/unset from the environment before running lsadmin's ckconfig (do not allow unprivileged users to set LSF_ENVDIR to reference an alternate lsf.conf).
lsadmin (ckconfig) LSF_ENVDIR = unset - Configuration
Ensure the LSF_SERVERDIR environment variable is removed/unset from the environment before running lsadmin's ckconfig (do not allow it to point to an untrusted or user-controlled lim executable).
lsadmin (ckconfig) LSF_SERVERDIR = unset - Compensating control
Restrict execution of lsadmin (and its ckconfig subcommand) to trusted administrators only—e.g., remove execute permission for unprivileged users (chmod/chown) and limit invocation via sudoers—and/or invoke lsadmin via a wrapper that sanitizes the environment (clears LSF_ENVDIR and LSF_SERVERDIR) prior to execution.
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0337?
CVE-2003-0337 is considered a high severity vulnerability due to its potential for allowing local users to execute arbitrary programs.
How do I fix CVE-2003-0337?
To fix CVE-2003-0337, ensure that the LSF_ENVDIR environment variable is properly configured to avoid unauthorized lsf.conf file references.
Who is affected by CVE-2003-0337?
CVE-2003-0337 affects local users of Platform Lsadmin version 5.1.
What types of attacks can exploit CVE-2003-0337?
CVE-2003-0337 can be exploited by local users to execute arbitrary code or malicious programs on the affected system.
Is CVE-2003-0337 a remote vulnerability?
No, CVE-2003-0337 is not a remote vulnerability; it requires local access to the system to exploit.