VULHUB ™

LSF(Load Sharing Facility) is a series of tools for scheduling, monitoring and analyzing the workload of a network. It supports a number of Unix platforms and can also be used to manage workstations running the Microsoft Windows NT/2000 platforms. Upon execution, the software does not check for pre-existing log files. Since the program runs with root privileges, it is possible for a local user to create symbolic links to arbitrary files. The log files are created with world-readable permissions, thus allowing the attacker to gain read access to the file at the end of the symbolic link. This could allow a local attacker to gain administrative access on a vulnerable system.

LSF(Load Sharing Facility) is a series of tools for scheduling, monitoring and analyzing the workload of a network. It supports a number of Unix platforms and can also be used to manage workstations running the Microsoft Windows NT/2000 platforms. Upon execution, the software does not check for pre-existing log files. Since the program runs with root privileges, it is possible for a local user to create symbolic links to arbitrary files. The log files are created with world-readable permissions, thus allowing the attacker to gain read access to the file at the end of the symbolic link. This could allow a local attacker to gain administrative access on a vulnerable system.