CVE-2004-0318
Load Sharing Facility 4.x-6.x - Privilege Escalation via LSF_EAUTH_UID Environment Variable
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2004-0318. PoCs published by Tomasz Grabowski.
AI-analyzed exploit summary This exploit leverages a privilege escalation vulnerability in the Load Sharing Facility (LSF) eauth component by manipulating the LSF_EAUTH_UID environment variable to impersonate any user. It then sends crafted packets to the target daemon to execute commands as the impersonated user.
Description
Load Sharing Facility (LSF) 4.x, 5.x, and 6.x uses the LSF_EAUTH_UID environment variable, if it exists, instead of the real UID of the user, which could allow remote attackers within the local cluster to gain privileges.
Exploits (1)
This exploit leverages a privilege escalation vulnerability in the Load Sharing Facility (LSF) eauth component by manipulating the LSF_EAUTH_UID environment variable to impersonate any user. It then sends crafted packets to the target daemon to execute commands as the impersonated user.