Every CVESearch/Get API key

CVE-2003-0337

The ckconfig command in lsadmin for Load Sharing Facility (LSF) 5.1 allows local users to execute...

4.6 Medium

CVE-2003-0337 is a medium vulnerability (CVSS 4.6) in Platform Lsadmin, published May 22, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 25th percentile. No source names a fixed version.

What does this mean?
Severity
4.6 MediumCVSS 2.0, NVD
Exploit chance
0.32%EPSS, 25th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

The ckconfig command in lsadmin for Load Sharing Facility (LSF) 5.1 allows local users to execute arbitrary programs by modifying the LSF_ENVDIR environment variable to reference an alternate lsf.conf file, then modifying LSF_SERVERDIR to point to a malicious lim program, which lsadmin then executes.

Exploit likelihood

0.32%Down 0.6 points since Feb 4, 2022
90%50%10%1%

Affected products

What each source reports

NVD Score used4.6

The ckconfig command in lsadmin for Load Sharing Facility (LSF) 5.1 allows local users to execute arbitrary programs by modifying the LSF_ENVDIR environment variable to reference an alternate lsf.conf file, then modifying LSF_SERVERDIR to point to a malicious lim program, which lsadmin then executes.

Record
CVE-2003-0337
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

The ckconfig command in lsadmin for Load Sharing Facility (LSF) 5.1 allows local users to execute arbitrary programs by modifying the LSF_ENVDIR environment variable to reference an alternate lsf.conf file, then modifying LSF_SERVERDIR to point to a malicious lim program, which lsadmin then executes.

Record
CVE-2003-0337
Updated
2026-11-02
EUVDEUVD-2003-0332No score

The ckconfig command in lsadmin for Load Sharing Facility (LSF) 5.1 allows local users to execute arbitrary programs by modifying the LSF_ENVDIR environment variable to reference an alternate lsf.conf file, then modifying LSF_SERVERDIR to point to a malicious lim program, which lsadmin then executes.

Record
EUVD-2003-0332
Updated
2026-11-03
GitHub AdvisoriesGHSA-mh42-89mv-q3wwNo score

The ckconfig command in lsadmin for Load Sharing Facility (LSF) 5.1 allows local users to execute...

The ckconfig command in lsadmin for Load Sharing Facility (LSF) 5.1 allows local users to execute arbitrary programs by modifying the LSF_ENVDIR environment variable to reference an alternate lsf.conf file, then modifying LSF_SERVERDIR to point to a malicious lim program, which lsadmin then executes.

Record
GHSA-mh42-89mv-q3ww
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open