CVE-2010-3380
Estado: ModificadaMedia (6.9)—
The (1) init.d/slurm and (2) init.d/slurmdbd scripts in SLURM before 2.1.14 place the . (dot) directory in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.
CVSS
- Versión: 2.0
- Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
- Puntuación base: 6.9
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.30%
- Percentil entre todas las CVEs puntuadas: 20
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-Other
Referencias
- http://secunia.com/advisories/41614
- http://sourceforge.net/projects/slurm/files//slurm/version_2.1/2.1.14/RELEASE_NOTES_2.1.14/view
- http://www.securityfocus.com/bid/43537
- http://secunia.com/advisories/41614
- http://sourceforge.net/projects/slurm/files//slurm/version_2.1/2.1.14/RELEASE_NOTES_2.1.14/view
- http://www.securityfocus.com/bid/43537
JSON original (NVD)
Mostrar
{
"id": "CVE-2010-3380",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.9,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.4,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-09-29T17:00:05.057",
"references": [
{
"url": "http://secunia.com/advisories/41614",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://sourceforge.net/projects/slurm/files//slurm/version_2.1/2.1.14/RELEASE_NOTES_2.1.14/view",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/43537",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/41614",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://sourceforge.net/projects/slurm/files//slurm/version_2.1/2.1.14/RELEASE_NOTES_2.1.14/view",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/43537",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The (1) init.d/slurm and (2) init.d/slurmdbd scripts in SLURM before 2.1.14 place the . (dot) directory in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory."
},
{
"lang": "es",
"value": "Los scripts (1) init.d/slurm y (2) init.d/slurmdbd en SLURM anterior a v2.1.14 colocan el directorio . (punto) en el LD_LIBRARY_PATH, lo cual permite a usuarios locales conseguir privilegios a través de una biblioteca compartida Troyanizada en el directorio de trabajo actual."
}
],
"lastModified": "2026-06-16T23:22:40.420",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:llnl:slurm:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D518FA8-DF9C-4F3B-BB4C-912CA7A86437",
"versionEndIncluding": "2.1.13"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:1.3.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA5AE726-573F-42BF-A3B0-DDDC04983318"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:1.3.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73158CC3-2D7D-45CA-9CF1-5681E2F2B3B2"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:1.3.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92E2C20C-65D2-457F-B3C6-9BD3955B2491"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:1.3.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5EBEA0E-EC65-4723-9FB3-5477C323B8EE"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:1.3.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA8ADC3B-B282-4CD7-8676-3336E7A0186C"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:1.3.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F58756A3-50B2-4BA3-BE54-1E1939C8FF62"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "07D44DC4-8AED-42DF-9D89-C58B64DC429A"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26C5BE27-D112-44D7-947B-4452E8A2B1C5"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0FC65A02-EFE9-4D4E-A3A0-255A129CB506"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9428EDAF-1BF4-422B-8508-D230FB44EB2D"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B59C3482-49F1-4B0F-A886-ED1009F2F84C"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0905848-36CB-4182-9B66-EFCAB7F81E77"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6488CDA2-954A-45E0-875F-4DBAAC44F91B"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AAFCDF1A-9292-4C3F-88B0-20DFA2D1BDFB"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFBA6D0A-072B-4BFD-A48F-E0364AE71ACE"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF69D6F6-87D8-4DE3-B200-FD430E4A97CE"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B1E504DB-274E-46AE-83C1-7B912C2ED1E3"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "929811EA-399E-42A3-B68C-416B8C90600F"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5726226-F2A8-42DC-AE33-082080A9F8EB"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8562C62-819E-40A9-99C5-111532AA9725"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D62E2D28-F36E-4BFC-85B4-9BDD787EE3A4"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F99F81D1-B6FB-436A-A0AE-29F2DBA2B07C"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0AAE61AE-BA38-4569-ADAB-2544088D5A24"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0EFB71C6-B415-49CB-AAF2-4798D77CA9A6"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.1.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95965877-464D-4557-A7D7-0203014011A2"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.1.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4BCB7A5C-1FFB-4C64-BEDC-D11CA7E5BD9C"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.1.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29B26745-83A6-4D13-8332-3EB6E2FDB216"
},
{
"criteria": "cpe:2.3:a:llnl:slurm:2.1.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E841E17-2671-4113-BE97-F3C4CC480122"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}