CVE-2011-2193

2011-06-2420:55:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2011-2193

buffer overflows

torque resource manager

privilege escalation

nvd

6.4 Medium

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

71.7%

JSON

Multiple buffer overflows in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.x before 2.4.14, 2.5.x before 2.5.6, and 3.x before 3.0.2 allow (1) remote authenticated users to gain privileges via a long Job_Name field in a qsub command to the server, and might allow (2) local users to gain privileges via vectors involving a long host variable in pbs_iff.

CPENameOperatorVersion
clusterresources:torque_resource_managerclusterresources torque resource managereq2.1.2
clusterresources:torque_resource_managerclusterresources torque resource managereq2.1.9
clusterresources:torque_resource_managerclusterresources torque resource managereq2.1.8
clusterresources:torque_resource_managerclusterresources torque resource managereq2.3.7
clusterresources:torque_resource_managerclusterresources torque resource managereq2.3.5
clusterresources:torque_resource_managerclusterresources torque resource managereq2.1.3
clusterresources:torque_resource_managerclusterresources torque resource managereq2.4.4
clusterresources:torque_resource_managerclusterresources torque resource managereq2.4.9
clusterresources:torque_resource_managerclusterresources torque resource managereq2.1.10
clusterresources:torque_resource_managerclusterresources torque resource managereq2.1.11

CPE	Name	Operator	Version
clusterresources:torque_resource_manager	clusterresources torque resource manager	eq	2.1.2
clusterresources:torque_resource_manager	clusterresources torque resource manager	eq	2.1.9
clusterresources:torque_resource_manager	clusterresources torque resource manager	eq	2.1.8
clusterresources:torque_resource_manager	clusterresources torque resource manager	eq	2.3.7
clusterresources:torque_resource_manager	clusterresources torque resource manager	eq	2.3.5
clusterresources:torque_resource_manager	clusterresources torque resource manager	eq	2.1.3
clusterresources:torque_resource_manager	clusterresources torque resource manager	eq	2.4.4
clusterresources:torque_resource_manager	clusterresources torque resource manager	eq	2.4.9
clusterresources:torque_resource_manager	clusterresources torque resource manager	eq	2.1.10
clusterresources:torque_resource_manager	clusterresources torque resource manager	eq	2.1.11