CVE-2013-4495

The sendthemail function in server/svrmail.c in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email -M switch to qsub...

CVE-2013-4495: Improper Control of Generation of Code

The sendthemail function in server/svrmail.c in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email -M switch to qsub...

Updated torque packages fix CVE-2013-4495

Updated torque packages fix security vulnerability: A user could submit executable shell commands on the tail of what is passed with the -M switch for qsub. This was later passed to a pipe, making it possible for these commands to be executed as root on the pbsserver CVE-2013-4495...

PT-2013-5044

Name of the Vulnerable Software and Affected Versions TORQUE Resource Manager versions prior to 4.2.6 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the email -M switch to qsub, due to a problem in the send the mail function in server/svr...

UBUNTU-CVE-2011-2907

Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager 3.0.1 and earlier allows remote attackers to bypass host-based authentication and submit arbitrary jobs via a modified PBSOHOST variable to the qsub program...

Design/Logic Flaw

Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager 3.0.1 and earlier allows remote attackers to bypass host-based authentication and submit arbitrary jobs via a modified PBSOHOST variable to the qsub program...

CVE-2011-2907: Improper Authentication

Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager 3.0.1 and earlier allows remote attackers to bypass host-based authentication and submit arbitrary jobs via a modified PBSOHOST variable to the qsub program...

PT-2011-4184

Name of the Vulnerable Software and Affected Versions Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager versions 3.0.1 and earlier Description The issue allows remote attackers to bypass host-based authentication and submit arbitrary jobs. This is achieved by modifying...

CVE-2011-2193

Multiple buffer overflows in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager 2.x before 2.4.14, 2.5.x before 2.5.6, and 3.x before 3.0.2 allow 1 remote authenticated users to gain privileges via a long JobName field in a qsub command to the server, and might allow 2...

PT-2011-3675

Name of the Vulnerable Software and Affected Versions TORQUE Resource Manager versions 2.x through 2.4.13 TORQUE Resource Manager versions 2.5.x through 2.5.5 TORQUE Resource Manager versions 3.x through 3.0.1 Description The issue concerns buffer overflows in the TORQUE Resource Manager. Remote...

CVE-2011-2193: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager 2.x before 2.4.14, 2.5.x before 2.5.6, and 3.x before 3.0.2 allow 1 remote authenticated users to gain privileges via a long JobName field in a qsub command to the server, and might allow 2...