CVE-2013-4495

2013-11-2014:12:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2013-4495

terascale

open-source

resource manager

torque

nvd

security vulnerability

7.3 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.016 Low

EPSS

Percentile

87.2%

JSON

The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email (-M switch) to qsub.

CPENameOperatorVersion
adaptivecomputing:torque_resource_manageradaptivecomputing torque resource managereq3.0.3
adaptivecomputing:torque_resource_manageradaptivecomputing torque resource managereq2.4.4
adaptivecomputing:torque_resource_manageradaptivecomputing torque resource managereq4.2.3
adaptivecomputing:torque_resource_manageradaptivecomputing torque resource managereq2.5.5
adaptivecomputing:torque_resource_manageradaptivecomputing torque resource managereq2.5.6
adaptivecomputing:torque_resource_manageradaptivecomputing torque resource managereq4.2.2
adaptivecomputing:torque_resource_manageradaptivecomputing torque resource managereq2.1.3
adaptivecomputing:torque_resource_manageradaptivecomputing torque resource managereq2.4.16
adaptivecomputing:torque_resource_manageradaptivecomputing torque resource managereq3.0.4
adaptivecomputing:torque_resource_manageradaptivecomputing torque resource managereq2.4.17

CPE	Name	Operator	Version
adaptivecomputing:torque_resource_manager	adaptivecomputing torque resource manager	eq	3.0.3
adaptivecomputing:torque_resource_manager	adaptivecomputing torque resource manager	eq	2.4.4
adaptivecomputing:torque_resource_manager	adaptivecomputing torque resource manager	eq	4.2.3
adaptivecomputing:torque_resource_manager	adaptivecomputing torque resource manager	eq	2.5.5
adaptivecomputing:torque_resource_manager	adaptivecomputing torque resource manager	eq	2.5.6
adaptivecomputing:torque_resource_manager	adaptivecomputing torque resource manager	eq	4.2.2
adaptivecomputing:torque_resource_manager	adaptivecomputing torque resource manager	eq	2.1.3
adaptivecomputing:torque_resource_manager	adaptivecomputing torque resource manager	eq	2.4.16
adaptivecomputing:torque_resource_manager	adaptivecomputing torque resource manager	eq	3.0.4
adaptivecomputing:torque_resource_manager	adaptivecomputing torque resource manager	eq	2.4.17