Lucene search

K
nvd[email protected]NVD:CVE-2013-4495
HistoryNov 20, 2013 - 2:12 p.m.

CVE-2013-4495

2013-11-2014:12:30
CWE-94
web.nvd.nist.gov

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.016

Percentile

87.4%

The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email (-M switch) to qsub.

Affected configurations

NVD
Node
adaptivecomputingtorque_resource_managerRange4.2.5
OR
adaptivecomputingtorque_resource_managerMatch2.0.0
OR
adaptivecomputingtorque_resource_managerMatch2.1.2
OR
adaptivecomputingtorque_resource_managerMatch2.1.3
OR
adaptivecomputingtorque_resource_managerMatch2.1.6
OR
adaptivecomputingtorque_resource_managerMatch2.1.7
OR
adaptivecomputingtorque_resource_managerMatch2.1.8
OR
adaptivecomputingtorque_resource_managerMatch2.1.9
OR
adaptivecomputingtorque_resource_managerMatch2.1.10
OR
adaptivecomputingtorque_resource_managerMatch2.1.11
OR
adaptivecomputingtorque_resource_managerMatch2.2.0
OR
adaptivecomputingtorque_resource_managerMatch2.2.1
OR
adaptivecomputingtorque_resource_managerMatch2.3.0
OR
adaptivecomputingtorque_resource_managerMatch2.3.1
OR
adaptivecomputingtorque_resource_managerMatch2.3.2
OR
adaptivecomputingtorque_resource_managerMatch2.3.3
OR
adaptivecomputingtorque_resource_managerMatch2.3.4
OR
adaptivecomputingtorque_resource_managerMatch2.3.5
OR
adaptivecomputingtorque_resource_managerMatch2.3.6
OR
adaptivecomputingtorque_resource_managerMatch2.3.7
OR
adaptivecomputingtorque_resource_managerMatch2.3.8
OR
adaptivecomputingtorque_resource_managerMatch2.3.9
OR
adaptivecomputingtorque_resource_managerMatch2.3.10
OR
adaptivecomputingtorque_resource_managerMatch2.3.11
OR
adaptivecomputingtorque_resource_managerMatch2.3.12
OR
adaptivecomputingtorque_resource_managerMatch2.3.13
OR
adaptivecomputingtorque_resource_managerMatch2.4.2
OR
adaptivecomputingtorque_resource_managerMatch2.4.3
OR
adaptivecomputingtorque_resource_managerMatch2.4.4
OR
adaptivecomputingtorque_resource_managerMatch2.4.5
OR
adaptivecomputingtorque_resource_managerMatch2.4.6
OR
adaptivecomputingtorque_resource_managerMatch2.4.7
OR
adaptivecomputingtorque_resource_managerMatch2.4.8
OR
adaptivecomputingtorque_resource_managerMatch2.4.9
OR
adaptivecomputingtorque_resource_managerMatch2.4.10
OR
adaptivecomputingtorque_resource_managerMatch2.4.11
OR
adaptivecomputingtorque_resource_managerMatch2.4.12
OR
adaptivecomputingtorque_resource_managerMatch2.4.13
OR
adaptivecomputingtorque_resource_managerMatch2.4.14
OR
adaptivecomputingtorque_resource_managerMatch2.4.15
OR
adaptivecomputingtorque_resource_managerMatch2.4.16
OR
adaptivecomputingtorque_resource_managerMatch2.4.17
OR
adaptivecomputingtorque_resource_managerMatch2.5.0
OR
adaptivecomputingtorque_resource_managerMatch2.5.1
OR
adaptivecomputingtorque_resource_managerMatch2.5.2
OR
adaptivecomputingtorque_resource_managerMatch2.5.3
OR
adaptivecomputingtorque_resource_managerMatch2.5.4
OR
adaptivecomputingtorque_resource_managerMatch2.5.5
OR
adaptivecomputingtorque_resource_managerMatch2.5.6
OR
adaptivecomputingtorque_resource_managerMatch2.5.7
OR
adaptivecomputingtorque_resource_managerMatch2.5.8
OR
adaptivecomputingtorque_resource_managerMatch2.5.9
OR
adaptivecomputingtorque_resource_managerMatch2.5.10
OR
adaptivecomputingtorque_resource_managerMatch2.5.11
OR
adaptivecomputingtorque_resource_managerMatch2.5.12
OR
adaptivecomputingtorque_resource_managerMatch2.5.13
OR
adaptivecomputingtorque_resource_managerMatch3.0.0
OR
adaptivecomputingtorque_resource_managerMatch3.0.1
OR
adaptivecomputingtorque_resource_managerMatch3.0.2
OR
adaptivecomputingtorque_resource_managerMatch3.0.3
OR
adaptivecomputingtorque_resource_managerMatch3.0.4
OR
adaptivecomputingtorque_resource_managerMatch3.0.5
OR
adaptivecomputingtorque_resource_managerMatch3.0.6
OR
adaptivecomputingtorque_resource_managerMatch4.0.0
OR
adaptivecomputingtorque_resource_managerMatch4.0.2
OR
adaptivecomputingtorque_resource_managerMatch4.1.0
OR
adaptivecomputingtorque_resource_managerMatch4.1.1
OR
adaptivecomputingtorque_resource_managerMatch4.1.2
OR
adaptivecomputingtorque_resource_managerMatch4.1.3
OR
adaptivecomputingtorque_resource_managerMatch4.1.5.1
OR
adaptivecomputingtorque_resource_managerMatch4.1.6
OR
adaptivecomputingtorque_resource_managerMatch4.1.7
OR
adaptivecomputingtorque_resource_managerMatch4.2.2
OR
adaptivecomputingtorque_resource_managerMatch4.2.3
OR
adaptivecomputingtorque_resource_managerMatch4.2.3.1
OR
adaptivecomputingtorque_resource_managerMatch4.2.4.1

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.016

Percentile

87.4%