Updated torque packages fix CVE-2013-4319

2013-10-1723:03:34

Gentoo Foundation

advisories.mageia.org

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS

0.003

Percentile

66.0%

JSON

Updated torque package fixes security vulnerability: A non-priviledged user who was able to run jobs or login to a node which ran pbs_server or pbs_mom, could submit arbitrary jobs to a pbs_mom daemon to queue and run the job, which would run as root (CVE-2013-4319).

OSVersionArchitecturePackageVersionFilename
Mageia2noarchtorque< 2.5.12-1.1torque-2.5.12-1.1.mga2
Mageia3noarchtorque< 4.1.5.1-1.1torque-4.1.5.1-1.1.mga3