CVE-2014-3684

2014-10-3014:55:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2014-3684

tm_adopt function

libifl

terascale open-source resource and queue manager

torque resource manager

remote authentication

process kill

6 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.005 Low

EPSS

Percentile

76.2%

JSON

The tm_adopt function in lib/Libifl/tm.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 5.0.x, 4.5.x, 4.2.x, and earlier does not validate that the owner of the process also owns the adopted session id, which allows remote authenticated users to kill arbitrary processes via a crafted executable.

CPENameOperatorVersion
adaptivecomputing:torque_resource_manageradaptivecomputing torque resource managereq4.2.3
adaptivecomputing:torque_resource_manageradaptivecomputing torque resource managereq4.2.9
adaptivecomputing:torque_resource_manageradaptivecomputing torque resource managereq5.0.0-1_43d8f09a
adaptivecomputing:torque_resource_manageradaptivecomputing torque resource managereq4.2.4.1
adaptivecomputing:torque_resource_manageradaptivecomputing torque resource managereq4.2.7
adaptivecomputing:torque_resource_manageradaptivecomputing torque resource managereq4.2.8
adaptivecomputing:torque_resource_manageradaptivecomputing torque resource managereq4.2.6.1
adaptivecomputing:torque_resource_manageradaptivecomputing torque resource managereq4.2.6
adaptivecomputing:torque_resource_manageradaptivecomputing torque resource managereq4.2.4
adaptivecomputing:torque_resource_manageradaptivecomputing torque resource managereq4.2.5

CPE	Name	Operator	Version
adaptivecomputing:torque_resource_manager	adaptivecomputing torque resource manager	eq	4.2.3
adaptivecomputing:torque_resource_manager	adaptivecomputing torque resource manager	eq	4.2.9
adaptivecomputing:torque_resource_manager	adaptivecomputing torque resource manager	eq	5.0.0-1_43d8f09a
adaptivecomputing:torque_resource_manager	adaptivecomputing torque resource manager	eq	4.2.4.1
adaptivecomputing:torque_resource_manager	adaptivecomputing torque resource manager	eq	4.2.7
adaptivecomputing:torque_resource_manager	adaptivecomputing torque resource manager	eq	4.2.8
adaptivecomputing:torque_resource_manager	adaptivecomputing torque resource manager	eq	4.2.6.1
adaptivecomputing:torque_resource_manager	adaptivecomputing torque resource manager	eq	4.2.6
adaptivecomputing:torque_resource_manager	adaptivecomputing torque resource manager	eq	4.2.4
adaptivecomputing:torque_resource_manager	adaptivecomputing torque resource manager	eq	4.2.5