Sun Grid Engine vulnerabilities

4 CVEs affecting Sun Grid Engine, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-0046, published 2009-01-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-0046, published 2009-01-07. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. Sun GridEngine 5.3 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a…
CVE-2006-0408, published 2006-01-25. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. rsh utility in Sun Grid Engine (SGE) before 6.0u7_1 allows local users to gain privileges and execute arbitrary code via unspecified vectors, possibly involving command line arguments.
CVE-2006-1506, published 2006-03-30. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in rsh in Sun Microsystems Sun Grid Engine 5.3 before 20060327 and N1 Grid Engine 6.0 before 20060327 allows local users to gain root privileges.
CVE-2006-2930, published 2006-06-09. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Unspecified vulnerability in Sun Grid Engine 5.3 and Sun N1 Grid Engine 6.0, when configured in Certificate Security Protocol (CSP) Mode, allows local users to shut down the grid service or gain…