Lucene search
Gentoo FoundationMGASA-2013-0327HistoryNov 18, 2013 - 6:41 p.m.
Updated torque packages fix CVE-2013-4495
2013-11-1818:41:45
Gentoo Foundation
advisories.mageia.org
12
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.016
Percentile
87.4%
Updated torque packages fix security vulnerability: A user could submit executable shell commands on the tail of what is passed with the -M switch for qsub. This was later passed to a pipe, making it possible for these commands to be executed as root on the pbs_server (CVE-2013-4495).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 2 | noarch | torque | <Â 2.5.12-1.2 | torque-2.5.12-1.2.mga2 |
| Mageia | 3 | noarch | torque | <Â 4.1.5.1-1.2 | torque-4.1.5.1-1.2.mga3 |
Related
nessus
nessus
Debian DSA-2796-1 : torque - arbitrary code execution
2013-11-21 00:00:00
Fedora 21 : torque-4.2.8-1.fc21 (2014-10153)
2014-09-23 00:00:00
Mandriva Linux Security Advisory : torque (MDVSA-2013:268)
2013-11-20 00:00:00
cve
cve
CVE-2013-4495
2013-11-20 14:12:30
openvas
openvas
Debian Security Advisory DSA 2796-1 (torque - arbitrary code execution)
2013-11-13 00:00:00
Debian: Security Advisory (DSA-2796-1)
2013-11-12 00:00:00
Mageia: Security Advisory (MGASA-2013-0327)
2022-01-28 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: torque-4.2.8-1.fc21
2014-09-23 04:46:33
[SECURITY] Fedora 20 Update: torque-3.0.4-6.fc20
2014-10-18 16:59:37
[SECURITY] Fedora 19 Update: torque-3.0.4-5.fc19
2014-10-18 17:00:05
cvelist
cvelist
CVE-2013-4495
2013-11-19 19:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2796-1] torque security update
2013-11-18 00:00:00
torque authentication bypass
2013-11-18 00:00:00
debian
debian
[SECURITY] [DSA 2796-1] torque security update
2013-11-13 19:31:34
[SECURITY] [DSA 2796-1] torque security update
2013-11-13 19:31:34
ubuntucve
ubuntucve
CVE-2013-4495
2013-11-20 00:00:00
nvd
nvd
CVE-2013-4495
2013-11-20 14:12:30
prion
prion
Design/Logic Flaw
2013-11-20 14:12:00
gentoo
gentoo
TORQUE Resource Manager: Multiple vulnerabilities
2014-12-26 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.016
Percentile
87.4%
Related for MGASA-2013-0327