Lucene search
HistoryNov 20, 2013 - 2:12 p.m.
CVE-2013-4495
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.016
Percentile
87.4%
The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email (-M switch) to qsub.
Affected configurations
Node
adaptivecomputingtorque_resource_managerRange≤4.2.5
ORadaptivecomputingtorque_resource_managerMatch2.0.0
ORadaptivecomputingtorque_resource_managerMatch2.1.2
ORadaptivecomputingtorque_resource_managerMatch2.1.3
ORadaptivecomputingtorque_resource_managerMatch2.1.6
ORadaptivecomputingtorque_resource_managerMatch2.1.7
ORadaptivecomputingtorque_resource_managerMatch2.1.8
ORadaptivecomputingtorque_resource_managerMatch2.1.9
ORadaptivecomputingtorque_resource_managerMatch2.1.10
ORadaptivecomputingtorque_resource_managerMatch2.1.11
ORadaptivecomputingtorque_resource_managerMatch2.2.0
ORadaptivecomputingtorque_resource_managerMatch2.2.1
ORadaptivecomputingtorque_resource_managerMatch2.3.0
ORadaptivecomputingtorque_resource_managerMatch2.3.1
ORadaptivecomputingtorque_resource_managerMatch2.3.2
ORadaptivecomputingtorque_resource_managerMatch2.3.3
ORadaptivecomputingtorque_resource_managerMatch2.3.4
ORadaptivecomputingtorque_resource_managerMatch2.3.5
ORadaptivecomputingtorque_resource_managerMatch2.3.6
ORadaptivecomputingtorque_resource_managerMatch2.3.7
ORadaptivecomputingtorque_resource_managerMatch2.3.8
ORadaptivecomputingtorque_resource_managerMatch2.3.9
ORadaptivecomputingtorque_resource_managerMatch2.3.10
ORadaptivecomputingtorque_resource_managerMatch2.3.11
ORadaptivecomputingtorque_resource_managerMatch2.3.12
ORadaptivecomputingtorque_resource_managerMatch2.3.13
ORadaptivecomputingtorque_resource_managerMatch2.4.2
ORadaptivecomputingtorque_resource_managerMatch2.4.3
ORadaptivecomputingtorque_resource_managerMatch2.4.4
ORadaptivecomputingtorque_resource_managerMatch2.4.5
ORadaptivecomputingtorque_resource_managerMatch2.4.6
ORadaptivecomputingtorque_resource_managerMatch2.4.7
ORadaptivecomputingtorque_resource_managerMatch2.4.8
ORadaptivecomputingtorque_resource_managerMatch2.4.9
ORadaptivecomputingtorque_resource_managerMatch2.4.10
ORadaptivecomputingtorque_resource_managerMatch2.4.11
ORadaptivecomputingtorque_resource_managerMatch2.4.12
ORadaptivecomputingtorque_resource_managerMatch2.4.13
ORadaptivecomputingtorque_resource_managerMatch2.4.14
ORadaptivecomputingtorque_resource_managerMatch2.4.15
ORadaptivecomputingtorque_resource_managerMatch2.4.16
ORadaptivecomputingtorque_resource_managerMatch2.4.17
ORadaptivecomputingtorque_resource_managerMatch2.5.0
ORadaptivecomputingtorque_resource_managerMatch2.5.1
ORadaptivecomputingtorque_resource_managerMatch2.5.2
ORadaptivecomputingtorque_resource_managerMatch2.5.3
ORadaptivecomputingtorque_resource_managerMatch2.5.4
ORadaptivecomputingtorque_resource_managerMatch2.5.5
ORadaptivecomputingtorque_resource_managerMatch2.5.6
ORadaptivecomputingtorque_resource_managerMatch2.5.7
ORadaptivecomputingtorque_resource_managerMatch2.5.8
ORadaptivecomputingtorque_resource_managerMatch2.5.9
ORadaptivecomputingtorque_resource_managerMatch2.5.10
ORadaptivecomputingtorque_resource_managerMatch2.5.11
ORadaptivecomputingtorque_resource_managerMatch2.5.12
ORadaptivecomputingtorque_resource_managerMatch2.5.13
ORadaptivecomputingtorque_resource_managerMatch3.0.0
ORadaptivecomputingtorque_resource_managerMatch3.0.1
ORadaptivecomputingtorque_resource_managerMatch3.0.2
ORadaptivecomputingtorque_resource_managerMatch3.0.3
ORadaptivecomputingtorque_resource_managerMatch3.0.4
ORadaptivecomputingtorque_resource_managerMatch3.0.5
ORadaptivecomputingtorque_resource_managerMatch3.0.6
ORadaptivecomputingtorque_resource_managerMatch4.0.0
ORadaptivecomputingtorque_resource_managerMatch4.0.2
ORadaptivecomputingtorque_resource_managerMatch4.1.0
ORadaptivecomputingtorque_resource_managerMatch4.1.1
ORadaptivecomputingtorque_resource_managerMatch4.1.2
ORadaptivecomputingtorque_resource_managerMatch4.1.3
ORadaptivecomputingtorque_resource_managerMatch4.1.5.1
ORadaptivecomputingtorque_resource_managerMatch4.1.6
ORadaptivecomputingtorque_resource_managerMatch4.1.7
ORadaptivecomputingtorque_resource_managerMatch4.2.2
ORadaptivecomputingtorque_resource_managerMatch4.2.3
ORadaptivecomputingtorque_resource_managerMatch4.2.3.1
ORadaptivecomputingtorque_resource_managerMatch4.2.4.1
Related
nessus
nessus
Fedora 21 : torque-4.2.8-1.fc21 (2014-10153)
2014-09-23 00:00:00
Debian DSA-2796-1 : torque - arbitrary code execution
2013-11-21 00:00:00
Mandriva Linux Security Advisory : torque (MDVSA-2013:268)
2013-11-20 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2796-1)
2013-11-12 00:00:00
Debian Security Advisory DSA 2796-1 (torque - arbitrary code execution)
2013-11-13 00:00:00
Mageia: Security Advisory (MGASA-2013-0327)
2022-01-28 00:00:00
prion
prion
Design/Logic Flaw
2013-11-20 14:12:00
debian
debian
[SECURITY] [DSA 2796-1] torque security update
2013-11-13 19:31:34
[SECURITY] [DSA 2796-1] torque security update
2013-11-13 19:31:34
ubuntucve
ubuntucve
CVE-2013-4495
2013-11-20 00:00:00
cvelist
cvelist
CVE-2013-4495
2013-11-19 19:00:00
mageia
mageia
Updated torque packages fix CVE-2013-4495
2013-11-18 18:41:45
fedora
fedora
[SECURITY] Fedora 21 Update: torque-4.2.8-1.fc21
2014-09-23 04:46:33
[SECURITY] Fedora 19 Update: torque-3.0.4-5.fc19
2014-10-18 17:00:05
[SECURITY] Fedora 20 Update: torque-3.0.4-6.fc20
2014-10-18 16:59:37
cve
cve
CVE-2013-4495
2013-11-20 14:12:30
securityvulns
securityvulns
[SECURITY] [DSA 2796-1] torque security update
2013-11-18 00:00:00
torque authentication bypass
2013-11-18 00:00:00
gentoo
gentoo
TORQUE Resource Manager: Multiple vulnerabilities
2014-12-26 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.016
Percentile
87.4%
Related for NVD:CVE-2013-4495