Lucene search
+L

162 matches found

Debian
Debian
added 2014/05/23 9:19 a.m.74 views

[SECURITY] [DSA 2936-1] torque security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2936-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 23, 2014 http://www.debian.org/security/faq -...

10CVSS6.2AI score0.17461EPSS
SaveExploits6
OpenVAS
OpenVAS
added 2014/05/23 12:0 a.m.31 views

Debian Security Advisory DSA 2936-1 (torque - security update)

John Fitzpatrick from MWR Labs reported a stack-based buffer overflow vulnerability in torque, a PBS-derived batch processing queueing system. An unauthenticated remote attacker could exploit this flaw to execute arbitrary code with root privileges. OpenVAS Vulnerability Test $Id: deb2936.nasl 67...

10CVSS0.9AI score0.17461EPSS
SaveExploits6References1
OSV
OSV
added 2014/05/23 12:0 a.m.14 views

DSA-2936-1 torque - security update

Bulletin has no description...

10CVSS6.1AI score0.17461EPSS
SaveExploits6
OpenVAS
OpenVAS
added 2014/05/22 12:0 a.m.26 views

Debian: Security Advisory (DSA-2936-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.5AI score0.17461EPSS
SaveExploits6References3
NVD
NVD
added 2014/05/16 2:55 p.m.18 views

CVE-2014-0749

Stack-based buffer overflow in lib/Libdis/disrsi.c in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager 2.5.x through 2.5.13 allows remote attackers to execute arbitrary code via a large count value...

10CVSS7.9AI score0.17461EPSS
SaveExploits6References11
OSV
OSV
added 2014/05/16 2:55 p.m.7 views

UBUNTU-CVE-2014-0749

Stack-based buffer overflow in lib/Libdis/disrsi.c in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager 2.5.x through 2.5.13 allows remote attackers to execute arbitrary code via a large count value...

10CVSS6.4AI score0.17461EPSS
SaveExploits6References5
Prion
Prion
added 2014/05/16 2:55 p.m.15 views

Stack overflow

Stack-based buffer overflow in lib/Libdis/disrsi.c in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager 2.5.x through 2.5.13 allows remote attackers to execute arbitrary code via a large count value...

10CVSS8.5AI score0.17461EPSS
SaveExploits6References11Affected Software1
CVE
CVE
added 2014/05/16 2:0 p.m.65 views

CVE-2014-0749

CVE-2014-0749 is a stack-based buffer overflow in TORQUE Resource Manager 2.5.x up to 2.5.13 triggered while parsing the DIS network protocol, enabling remote code execution. Public disclosures and advisories describe an unauthenticated remote attacker exploiting a small buffer overflow to run ar...

10CVSS7.9AI score0.17461EPSS
SaveExploits6References11Affected Software1
Cvelist
Cvelist
added 2014/05/16 2:0 p.m.29 views

CVE-2014-0749

Stack-based buffer overflow in lib/Libdis/disrsi.c in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager 2.5.x through 2.5.13 allows remote attackers to execute arbitrary code via a large count value...

7.7AI score0.17461EPSS
SaveExploits6References11
Tenable Nessus
Tenable Nessus
added 2013/11/21 12:0 a.m.19 views

Debian DSA-2796-1 : torque - arbitrary code execution

Matt Ezell from Oak Ridge National Labs reported a vulnerability in torque, a PBS-derived batch processing queueing system. A user could submit executable shell commands on the tail of what is passed with the -M switch for qsub. This was later passed to a pipe, making it possible for these comman...

10CVSS5.5AI score0.03266EPSS
SaveExploits0References5
NVD
NVD
added 2013/11/20 2:12 p.m.13 views

CVE-2013-4495

The sendthemail function in server/svrmail.c in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email -M switch to qsub...

10CVSS7.5AI score0.03266EPSS
SaveExploits0References4
OSV
OSV
added 2013/11/20 2:12 p.m.4 views

UBUNTU-CVE-2013-4495

The sendthemail function in server/svrmail.c in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email -M switch to qsub...

10CVSS6.1AI score0.03266EPSS
SaveExploits0References3
Prion
Prion
added 2013/11/20 2:12 p.m.13 views

Design/Logic Flaw

The sendthemail function in server/svrmail.c in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email -M switch to qsub...

10CVSS8AI score0.03266EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
added 2013/11/20 2:12 p.m.21 views

CVE-2013-4495

The sendthemail function in server/svrmail.c in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email -M switch to qsub...

10CVSS6.2AI score0.03266EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2013/11/20 12:0 a.m.17 views

Mandriva Linux Security Advisory : torque (MDVSA-2013:268)

Updated torque packages fix security vulnerability : A user could submit executable shell commands on the tail of what is passed with the -M switch for qsub. This was later passed to a pipe, making it possible for these commands to be executed as root on the pbsserver CVE-2013-4495. %NASLMINLEVEL...

10CVSS5.5AI score0.03266EPSS
SaveExploits0References2
CVE
CVE
added 2013/11/19 7:0 p.m.72 views

CVE-2013-4495

The vulnerability CVE-2013-4495 affects TORQUE Resource Manager before 4.2.6, where the send_the_mail function in server/svr_mail.c allows remote attackers to execute arbitrary commands via shell metacharacters in the email (-M) switch to qsub. This is a remote, unauthenticated vector with high i...

10CVSS7.4AI score0.03266EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2013/11/18 2:41 p.m.9 views

MGASA-2013-0327 Updated torque packages fix CVE-2013-4495

Updated torque packages fix security vulnerability: A user could submit executable shell commands on the tail of what is passed with the -M switch for qsub. This was later passed to a pipe, making it possible for these commands to be executed as root on the pbsserver CVE-2013-4495...

10CVSS6.6AI score0.03266EPSS
SaveExploits0References4
Mageia
Mageia
added 2013/11/18 2:41 p.m.30 views

Updated torque packages fix CVE-2013-4495

Updated torque packages fix security vulnerability: A user could submit executable shell commands on the tail of what is passed with the -M switch for qsub. This was later passed to a pipe, making it possible for these commands to be executed as root on the pbsserver CVE-2013-4495...

10CVSS1.7AI score0.03266EPSS
SaveExploits0References3
securityvulns
securityvulns
added 2013/11/18 12:0 a.m.49 views

[SECURITY] [DSA 2796-1] torque security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2796-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso November 13, 2013 http://www.debian.org/security/faq -...

10CVSS1.6AI score0.03266EPSS
SaveExploits0
securityvulns
securityvulns
added 2013/11/18 12:0 a.m.50 views

torque authentication bypass

It's possible to queue code execution by connecting directly to pbsmom port. Shell characters vulnerability...

10CVSS4.6AI score0.03266EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder