Lucene search
HistoryOct 11, 2013 - 10:55 p.m.
CVE-2013-4319
CVSS2
9
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
AI Score
6.8
Confidence
Low
EPSS
0.003
Percentile
66.0%
pbs_mom in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.5.x, 4.x, and earlier does not properly restrict access by unprivileged ports, which allows remote authenticated users to execute arbitrary jobs by submitting a command.
Affected configurations
Node
adaptivecomputingtorque_resource_managerRange≤4.0.2
ORadaptivecomputingtorque_resource_managerMatch2.0.0
ORadaptivecomputingtorque_resource_managerMatch2.1.2
ORadaptivecomputingtorque_resource_managerMatch2.1.3
ORadaptivecomputingtorque_resource_managerMatch2.1.6
ORadaptivecomputingtorque_resource_managerMatch2.1.7
ORadaptivecomputingtorque_resource_managerMatch2.1.8
ORadaptivecomputingtorque_resource_managerMatch2.1.9
ORadaptivecomputingtorque_resource_managerMatch2.1.10
ORadaptivecomputingtorque_resource_managerMatch2.1.11
ORadaptivecomputingtorque_resource_managerMatch2.2.0
ORadaptivecomputingtorque_resource_managerMatch2.2.1
ORadaptivecomputingtorque_resource_managerMatch2.3.0
ORadaptivecomputingtorque_resource_managerMatch2.3.1
ORadaptivecomputingtorque_resource_managerMatch2.3.2
ORadaptivecomputingtorque_resource_managerMatch2.3.3
ORadaptivecomputingtorque_resource_managerMatch2.3.4
ORadaptivecomputingtorque_resource_managerMatch2.3.5
ORadaptivecomputingtorque_resource_managerMatch2.3.6
ORadaptivecomputingtorque_resource_managerMatch2.3.7
ORadaptivecomputingtorque_resource_managerMatch2.3.8
ORadaptivecomputingtorque_resource_managerMatch2.3.9
ORadaptivecomputingtorque_resource_managerMatch2.3.10
ORadaptivecomputingtorque_resource_managerMatch2.3.11
ORadaptivecomputingtorque_resource_managerMatch2.3.12
ORadaptivecomputingtorque_resource_managerMatch2.3.13
ORadaptivecomputingtorque_resource_managerMatch2.4.2
ORadaptivecomputingtorque_resource_managerMatch2.4.3
ORadaptivecomputingtorque_resource_managerMatch2.4.4
ORadaptivecomputingtorque_resource_managerMatch2.4.5
ORadaptivecomputingtorque_resource_managerMatch2.4.6
ORadaptivecomputingtorque_resource_managerMatch2.4.7
ORadaptivecomputingtorque_resource_managerMatch2.4.8
ORadaptivecomputingtorque_resource_managerMatch2.4.9
ORadaptivecomputingtorque_resource_managerMatch2.4.10
ORadaptivecomputingtorque_resource_managerMatch2.4.11
ORadaptivecomputingtorque_resource_managerMatch2.4.12
ORadaptivecomputingtorque_resource_managerMatch2.4.13
ORadaptivecomputingtorque_resource_managerMatch2.4.14
ORadaptivecomputingtorque_resource_managerMatch2.4.15
ORadaptivecomputingtorque_resource_managerMatch2.4.16
ORadaptivecomputingtorque_resource_managerMatch2.4.17
ORadaptivecomputingtorque_resource_managerMatch2.5.0
ORadaptivecomputingtorque_resource_managerMatch2.5.1
ORadaptivecomputingtorque_resource_managerMatch2.5.2
ORadaptivecomputingtorque_resource_managerMatch2.5.3
ORadaptivecomputingtorque_resource_managerMatch2.5.4
ORadaptivecomputingtorque_resource_managerMatch2.5.5
ORadaptivecomputingtorque_resource_managerMatch2.5.6
ORadaptivecomputingtorque_resource_managerMatch2.5.7
ORadaptivecomputingtorque_resource_managerMatch2.5.8
ORadaptivecomputingtorque_resource_managerMatch2.5.9
ORadaptivecomputingtorque_resource_managerMatch2.5.10
ORadaptivecomputingtorque_resource_managerMatch2.5.11
ORadaptivecomputingtorque_resource_managerMatch2.5.12
ORadaptivecomputingtorque_resource_managerMatch2.5.13
ORadaptivecomputingtorque_resource_managerMatch3.0.0
ORadaptivecomputingtorque_resource_managerMatch3.0.1
ORadaptivecomputingtorque_resource_managerMatch3.0.2
ORadaptivecomputingtorque_resource_managerMatch3.0.3
ORadaptivecomputingtorque_resource_managerMatch3.0.4
ORadaptivecomputingtorque_resource_managerMatch3.0.5
ORadaptivecomputingtorque_resource_managerMatch3.0.6
ORadaptivecomputingtorque_resource_managerMatch4.0.0
ORadaptivecomputingtorque_resource_managerMatch4.1.0
ORadaptivecomputingtorque_resource_managerMatch4.1.1
ORadaptivecomputingtorque_resource_managerMatch4.1.2
ORadaptivecomputingtorque_resource_managerMatch4.1.3
ORadaptivecomputingtorque_resource_managerMatch4.1.5.1
ORadaptivecomputingtorque_resource_managerMatch4.1.6
ORadaptivecomputingtorque_resource_managerMatch4.1.7
ORadaptivecomputingtorque_resource_managerMatch4.2.2
ORadaptivecomputingtorque_resource_managerMatch4.2.3
ORadaptivecomputingtorque_resource_managerMatch4.2.3.1
ORadaptivecomputingtorque_resource_managerMatch4.2.4.1
ORadaptivecomputingtorque_resource_managerMatch4.2.5
Related
openvas
openvas
Mageia: Security Advisory (MGASA-2013-0308)
2022-01-28 00:00:00
Debian Security Advisory DSA 2770-1 (torque - authentication bypass)
2013-10-09 00:00:00
Debian: Security Advisory (DSA-2770-1)
2013-10-08 00:00:00
nessus
nessus
Debian DSA-2770-1 : torque - authentication bypass
2013-10-10 00:00:00
Mandriva Linux Security Advisory : torque (MDVSA-2013:252)
2013-10-20 00:00:00
Fedora 20 : torque-3.0.4-6.fc20 (2014-11989)
2014-10-20 00:00:00
mageia
mageia
Updated torque packages fix CVE-2013-4319
2013-10-17 23:03:34
cvelist
cvelist
CVE-2013-4319
2013-10-11 22:00:00
ubuntucve
ubuntucve
CVE-2013-4319
2013-10-11 00:00:00
debian
debian
[SECURITY] [DSA 2770-1] torque security update
2013-10-09 14:37:40
[SECURITY] [DSA 2770-1] torque security update
2013-10-09 14:37:40
securityvulns
securityvulns
[SECURITY] [DSA 2770-1] torque security update
2013-10-13 00:00:00
torque authentication bypass
2013-11-18 00:00:00
cve
cve
CVE-2013-4319
2013-10-11 22:55:40
prion
prion
Command injection
2013-10-11 22:55:00
fedora
fedora
[SECURITY] Fedora 19 Update: torque-3.0.4-5.fc19
2014-10-18 17:00:05
[SECURITY] Fedora 20 Update: torque-3.0.4-6.fc20
2014-10-18 16:59:37
[SECURITY] Fedora 20 Update: torque-4.2.10-3.fc20
2015-05-30 15:54:27
gentoo
gentoo
TORQUE Resource Manager: Multiple vulnerabilities
2014-12-26 00:00:00
CVSS2
9
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
AI Score
6.8
Confidence
Low
EPSS
0.003
Percentile
66.0%
Related for NVD:CVE-2013-4319