logo
DATABASE RESOURCES PRICING ABOUT US

[SECURITY] [DSA 2796-1] torque security update

Description

- ------------------------------------------------------------------------- Debian Security Advisory DSA-2796-1 security@debian.org http://www.debian.org/security/ Salvatore Bonaccorso November 13, 2013 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : torque Vulnerability : arbitrary code execution Problem type : remote Debian-specific: no CVE ID : CVE-2013-4495 Debian Bug : 729333 Matt Ezell from Oak Ridge National Labs reported a vulnerability in torque, a PBS-derived batch processing queueing system. A user could submit executable shell commands on the tail of what is passed with the -M switch for qsub. This was later passed to a pipe, making it possible for these commands to be executed as root on the pbs_server. For the oldstable distribution (squeeze), this problem has been fixed in version 2.4.8+dfsg-9squeeze3. For the stable distribution (wheezy), this problem has been fixed in version 2.4.16+dfsg-1+deb7u2. For the unstable distribution (sid), this problem has been fixed in version 2.4.16+dfsg-1.3. We recommend that you upgrade your torque packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org


Affected Package


OS OS Version Package Name Package Version
Debian 7 torque-pam 2.4.16+dfsg-1+deb7u2
Debian 6 torque-client 2.4.8+dfsg-9squeeze3
Debian 7 torque-common 2.4.16+dfsg-1+deb7u2
Debian 7 libtorque2-dev 2.4.16+dfsg-1+deb7u2
Debian 6 torque-pam 2.4.8+dfsg-9squeeze3
Debian 6 torque-mom 2.4.8+dfsg-9squeeze3
Debian 6 torque-scheduler 2.4.8+dfsg-9squeeze3
Debian 6 libtorque2 2.4.8+dfsg-9squeeze3
Debian 6 torque-server 2.4.8+dfsg-9squeeze3
Debian 6 libtorque2-dev 2.4.8+dfsg-9squeeze3
Debian 6 torque-mom 2.4.8+dfsg-9squeeze3
Debian 6 torque-scheduler 2.4.8+dfsg-9squeeze3
Debian 6 libtorque2 2.4.8+dfsg-9squeeze3
Debian 7 libtorque2-dev 2.4.16+dfsg-1+deb7u2
Debian 7 torque-client-x11 2.4.16+dfsg-1+deb7u2
Debian 7 torque-pam 2.4.16+dfsg-1+deb7u2
Debian 6 libtorque2-dev 2.4.8+dfsg-9squeeze3
Debian 6 torque-client 2.4.8+dfsg-9squeeze3
Debian 6 libtorque2 2.4.8+dfsg-9squeeze3
Debian 6 torque-pam 2.4.8+dfsg-9squeeze3
Debian 6 torque-common 2.4.8+dfsg-9squeeze3
Debian 6 torque-server 2.4.8+dfsg-9squeeze3
Debian 7 torque-mom 2.4.16+dfsg-1+deb7u2
Debian 7 torque-mom 2.4.16+dfsg-1+deb7u2
Debian 6 torque-client-x11 2.4.8+dfsg-9squeeze3
Debian 7 libtorque2-dev 2.4.16+dfsg-1+deb7u2
Debian 7 torque-mom 2.4.16+dfsg-1+deb7u2
Debian 6 torque-mom 2.4.8+dfsg-9squeeze3
Debian 7 torque-mom 2.4.16+dfsg-1+deb7u2
Debian 6 torque-client-x11 2.4.8+dfsg-9squeeze3
Debian 6 torque-client-x11 2.4.8+dfsg-9squeeze3
Debian 6 torque-server 2.4.8+dfsg-9squeeze3
Debian 7 libtorque2 2.4.16+dfsg-1+deb7u2
Debian 6 torque-scheduler 2.4.8+dfsg-9squeeze3
Debian 7 libtorque2 2.4.16+dfsg-1+deb7u2
Debian 6 torque-client 2.4.8+dfsg-9squeeze3
Debian 7 torque 2.4.16+dfsg-1+deb7u2
Debian 6 torque-client-x11 2.4.8+dfsg-9squeeze3
Debian 6 torque-scheduler 2.4.8+dfsg-9squeeze3
Debian 7 torque-pam 2.4.16+dfsg-1+deb7u2
Debian 7 torque-common 2.4.16+dfsg-1+deb7u2
Debian 6 torque-client 2.4.8+dfsg-9squeeze3
Debian 7 torque-client-x11 2.4.16+dfsg-1+deb7u2
Debian 7 torque-scheduler 2.4.16+dfsg-1+deb7u2
Debian 7 torque-pam 2.4.16+dfsg-1+deb7u2
Debian 6 libtorque2-dev 2.4.8+dfsg-9squeeze3
Debian 7 torque-server 2.4.16+dfsg-1+deb7u2
Debian 6 torque-common 2.4.8+dfsg-9squeeze3
Debian 7 libtorque2 2.4.16+dfsg-1+deb7u2
Debian 6 torque-pam 2.4.8+dfsg-9squeeze3
Debian 6 libtorque2 2.4.8+dfsg-9squeeze3
Debian 6 torque-pam 2.4.8+dfsg-9squeeze3
Debian 7 libtorque2 2.4.16+dfsg-1+deb7u2
Debian 6 torque-mom 2.4.8+dfsg-9squeeze3
Debian 6 torque-client 2.4.8+dfsg-9squeeze3
Debian 7 torque-server 2.4.16+dfsg-1+deb7u2
Debian 7 torque-pam 2.4.16+dfsg-1+deb7u2
Debian 6 torque-client-x11 2.4.8+dfsg-9squeeze3
Debian 6 torque-client-x11 2.4.8+dfsg-9squeeze3
Debian 7 torque-client-x11 2.4.16+dfsg-1+deb7u2
Debian 7 libtorque2-dev 2.4.16+dfsg-1+deb7u2
Debian 6 torque-server 2.4.8+dfsg-9squeeze3
Debian 7 torque-client 2.4.16+dfsg-1+deb7u2
Debian 7 torque-server 2.4.16+dfsg-1+deb7u2
Debian 6 torque-client-x11 2.4.8+dfsg-9squeeze3
Debian 7 torque-mom 2.4.16+dfsg-1+deb7u2
Debian 6 torque-pam 2.4.8+dfsg-9squeeze3
Debian 7 torque-pam 2.4.16+dfsg-1+deb7u2
Debian 7 torque-client 2.4.16+dfsg-1+deb7u2
Debian 7 torque-server 2.4.16+dfsg-1+deb7u2
Debian 7 libtorque2 2.4.16+dfsg-1+deb7u2
Debian 7 torque-pam 2.4.16+dfsg-1+deb7u2
Debian 7 libtorque2-dev 2.4.16+dfsg-1+deb7u2
Debian 7 torque-client 2.4.16+dfsg-1+deb7u2
Debian 6 libtorque2 2.4.8+dfsg-9squeeze3
Debian 6 torque-server 2.4.8+dfsg-9squeeze3
Debian 7 torque-common 2.4.16+dfsg-1+deb7u2
Debian 7 libtorque2-dev 2.4.16+dfsg-1+deb7u2
Debian 7 torque-common 2.4.16+dfsg-1+deb7u2
Debian 6 libtorque2-dev 2.4.8+dfsg-9squeeze3
Debian 6 torque-common 2.4.8+dfsg-9squeeze3
Debian 6 torque-scheduler 2.4.8+dfsg-9squeeze3
Debian 7 libtorque2 2.4.16+dfsg-1+deb7u2
Debian 7 torque-scheduler 2.4.16+dfsg-1+deb7u2
Debian 6 torque-client-x11 2.4.8+dfsg-9squeeze3
Debian 6 torque-mom 2.4.8+dfsg-9squeeze3
Debian 6 libtorque2 2.4.8+dfsg-9squeeze3
Debian 6 torque-common 2.4.8+dfsg-9squeeze3
Debian 6 torque-mom 2.4.8+dfsg-9squeeze3
Debian 6 torque-common 2.4.8+dfsg-9squeeze3
Debian 7 torque-common 2.4.16+dfsg-1+deb7u2
Debian 7 torque-pam 2.4.16+dfsg-1+deb7u2
Debian 6 torque-pam 2.4.8+dfsg-9squeeze3
Debian 6 torque-scheduler 2.4.8+dfsg-9squeeze3
Debian 7 torque-scheduler 2.4.16+dfsg-1+deb7u2
Debian 6 torque-mom 2.4.8+dfsg-9squeeze3
Debian 6 torque-mom 2.4.8+dfsg-9squeeze3
Debian 7 libtorque2 2.4.16+dfsg-1+deb7u2
Debian 7 torque-pam 2.4.16+dfsg-1+deb7u2
Debian 7 torque-server 2.4.16+dfsg-1+deb7u2
Debian 7 libtorque2 2.4.16+dfsg-1+deb7u2
Debian 6 torque-server 2.4.8+dfsg-9squeeze3
Debian 6 torque-common 2.4.8+dfsg-9squeeze3
Debian 6 torque-common 2.4.8+dfsg-9squeeze3
Debian 6 torque-pam 2.4.8+dfsg-9squeeze3
Debian 7 torque-client 2.4.16+dfsg-1+deb7u2
Debian 7 torque-client-x11 2.4.16+dfsg-1+deb7u2
Debian 6 libtorque2 2.4.8+dfsg-9squeeze3
Debian 6 torque 2.4.8+dfsg-9squeeze3
Debian 7 libtorque2-dev 2.4.16+dfsg-1+deb7u2
Debian 7 torque-mom 2.4.16+dfsg-1+deb7u2
Debian 7 torque-server 2.4.16+dfsg-1+deb7u2
Debian 6 torque-pam 2.4.8+dfsg-9squeeze3
Debian 6 torque-client 2.4.8+dfsg-9squeeze3
Debian 6 torque-common 2.4.8+dfsg-9squeeze3
Debian 7 torque-common 2.4.16+dfsg-1+deb7u2
Debian 7 torque-client-x11 2.4.16+dfsg-1+deb7u2
Debian 7 torque-client-x11 2.4.16+dfsg-1+deb7u2
Debian 7 torque-server 2.4.16+dfsg-1+deb7u2
Debian 6 torque-server 2.4.8+dfsg-9squeeze3
Debian 7 torque-client 2.4.16+dfsg-1+deb7u2
Debian 7 libtorque2 2.4.16+dfsg-1+deb7u2
Debian 7 libtorque2 2.4.16+dfsg-1+deb7u2
Debian 7 libtorque2-dev 2.4.16+dfsg-1+deb7u2
Debian 7 torque-common 2.4.16+dfsg-1+deb7u2
Debian 7 torque-client 2.4.16+dfsg-1+deb7u2
Debian 6 libtorque2 2.4.8+dfsg-9squeeze3
Debian 7 torque-mom 2.4.16+dfsg-1+deb7u2
Debian 7 torque-common 2.4.16+dfsg-1+deb7u2
Debian 7 torque-client 2.4.16+dfsg-1+deb7u2
Debian 7 torque-mom 2.4.16+dfsg-1+deb7u2
Debian 7 torque-client-x11 2.4.16+dfsg-1+deb7u2
Debian 6 libtorque2-dev 2.4.8+dfsg-9squeeze3
Debian 6 torque-scheduler 2.4.8+dfsg-9squeeze3
Debian 7 torque-scheduler 2.4.16+dfsg-1+deb7u2
Debian 7 libtorque2 2.4.16+dfsg-1+deb7u2
Debian 6 torque-client 2.4.8+dfsg-9squeeze3
Debian 6 libtorque2 2.4.8+dfsg-9squeeze3
Debian 7 torque-client-x11 2.4.16+dfsg-1+deb7u2
Debian 7 torque-common 2.4.16+dfsg-1+deb7u2
Debian 6 libtorque2-dev 2.4.8+dfsg-9squeeze3
Debian 6 libtorque2 2.4.8+dfsg-9squeeze3
Debian 7 torque-client 2.4.16+dfsg-1+deb7u2
Debian 6 torque-mom 2.4.8+dfsg-9squeeze3
Debian 7 torque-client 2.4.16+dfsg-1+deb7u2
Debian 6 torque-scheduler 2.4.8+dfsg-9squeeze3
Debian 7 torque-mom 2.4.16+dfsg-1+deb7u2
Debian 6 torque-client-x11 2.4.8+dfsg-9squeeze3
Debian 7 torque-mom 2.4.16+dfsg-1+deb7u2
Debian 7 torque-pam 2.4.16+dfsg-1+deb7u2
Debian 6 torque-client 2.4.8+dfsg-9squeeze3
Debian 6 torque-pam 2.4.8+dfsg-9squeeze3
Debian 6 torque-scheduler 2.4.8+dfsg-9squeeze3
Debian 7 torque-scheduler 2.4.16+dfsg-1+deb7u2
Debian 7 torque-common 2.4.16+dfsg-1+deb7u2
Debian 7 torque-scheduler 2.4.16+dfsg-1+deb7u2
Debian 7 torque-pam 2.4.16+dfsg-1+deb7u2
Debian 7 torque-client 2.4.16+dfsg-1+deb7u2
Debian 7 torque-client 2.4.16+dfsg-1+deb7u2
Debian 7 libtorque2 2.4.16+dfsg-1+deb7u2
Debian 7 torque-pam 2.4.16+dfsg-1+deb7u2
Debian 6 torque-mom 2.4.8+dfsg-9squeeze3
Debian 6 torque-client 2.4.8+dfsg-9squeeze3
Debian 7 torque-client-x11 2.4.16+dfsg-1+deb7u2
Debian 7 torque-common 2.4.16+dfsg-1+deb7u2
Debian 7 torque-client-x11 2.4.16+dfsg-1+deb7u2
Debian 7 torque-server 2.4.16+dfsg-1+deb7u2
Debian 6 libtorque2-dev 2.4.8+dfsg-9squeeze3
Debian 6 libtorque2-dev 2.4.8+dfsg-9squeeze3
Debian 6 torque-client-x11 2.4.8+dfsg-9squeeze3
Debian 6 torque-server 2.4.8+dfsg-9squeeze3
Debian 7 libtorque2 2.4.16+dfsg-1+deb7u2
Debian 7 torque-common 2.4.16+dfsg-1+deb7u2
Debian 7 torque-mom 2.4.16+dfsg-1+deb7u2
Debian 7 torque-client-x11 2.4.16+dfsg-1+deb7u2
Debian 6 torque-client 2.4.8+dfsg-9squeeze3
Debian 7 torque-scheduler 2.4.16+dfsg-1+deb7u2
Debian 7 torque-client 2.4.16+dfsg-1+deb7u2
Debian 6 torque-pam 2.4.8+dfsg-9squeeze3
Debian 7 torque-scheduler 2.4.16+dfsg-1+deb7u2
Debian 7 torque-server 2.4.16+dfsg-1+deb7u2
Debian 7 torque-server 2.4.16+dfsg-1+deb7u2
Debian 6 torque-mom 2.4.8+dfsg-9squeeze3
Debian 6 torque-common 2.4.8+dfsg-9squeeze3
Debian 6 torque-scheduler 2.4.8+dfsg-9squeeze3
Debian 7 torque-scheduler 2.4.16+dfsg-1+deb7u2
Debian 7 torque-server 2.4.16+dfsg-1+deb7u2
Debian 7 torque-scheduler 2.4.16+dfsg-1+deb7u2
Debian 7 libtorque2-dev 2.4.16+dfsg-1+deb7u2
Debian 6 torque-common 2.4.8+dfsg-9squeeze3
Debian 6 torque-client-x11 2.4.8+dfsg-9squeeze3
Debian 7 torque-server 2.4.16+dfsg-1+deb7u2
Debian 7 torque-client 2.4.16+dfsg-1+deb7u2
Debian 6 libtorque2-dev 2.4.8+dfsg-9squeeze3
Debian 7 torque-scheduler 2.4.16+dfsg-1+deb7u2
Debian 6 torque-server 2.4.8+dfsg-9squeeze3
Debian 7 libtorque2-dev 2.4.16+dfsg-1+deb7u2
Debian 7 torque-pam 2.4.16+dfsg-1+deb7u2
Debian 6 torque-client 2.4.8+dfsg-9squeeze3
Debian 7 libtorque2-dev 2.4.16+dfsg-1+deb7u2
Debian 7 torque-scheduler 2.4.16+dfsg-1+deb7u2
Debian 6 torque-server 2.4.8+dfsg-9squeeze3
Debian 6 libtorque2-dev 2.4.8+dfsg-9squeeze3
Debian 7 torque-mom 2.4.16+dfsg-1+deb7u2
Debian 7 torque-scheduler 2.4.16+dfsg-1+deb7u2
Debian 6 torque-common 2.4.8+dfsg-9squeeze3
Debian 6 torque-pam 2.4.8+dfsg-9squeeze3
Debian 7 libtorque2-dev 2.4.16+dfsg-1+deb7u2
Debian 6 torque-server 2.4.8+dfsg-9squeeze3
Debian 7 torque-mom 2.4.16+dfsg-1+deb7u2
Debian 6 libtorque2 2.4.8+dfsg-9squeeze3
Debian 7 torque-server 2.4.16+dfsg-1+deb7u2
Debian 7 torque-common 2.4.16+dfsg-1+deb7u2
Debian 7 torque-client-x11 2.4.16+dfsg-1+deb7u2
Debian 7 torque-client-x11 2.4.16+dfsg-1+deb7u2
Debian 6 libtorque2-dev 2.4.8+dfsg-9squeeze3
Debian 6 torque-scheduler 2.4.8+dfsg-9squeeze3
Debian 7 libtorque2-dev 2.4.16+dfsg-1+deb7u2

Related