Updated torque packages fix CVE-2014-3684

Updated torque packages fix security vulnerabilities: Chad Vizino reported that within a TORQUE Resource Manager job a non-root user could use a vulnerability in the tmadopt library call to kill processes he/she doesn't own including root-owned ones on any node in a job CVE-2014-3684. This update...

[SECURITY] Fedora 21 Update: torque-4.2.8-1.fc21

TORQUE Tera-scale Open-source Resource and QUEue manager is a resource manager providing control over batch jobs and distributed compute nodes. TORQUE is based on OpenPBS version 2.3.12 and incorporates scalability, fault tolerance, and feature extension patches provided by USC, NCSA, OSC, the U....

TORQUE Resource Manager 2.5.13 Buffer Overflow

!/usr/bin/env python Exploit Title: TORQUE Resource Manager 2.5.x-2.5.13 stack based buffer overflow stub Date: 27 May 2014 Exploit Author: bwall - @botnethunter Vulnerability discovered by: MWR Labs CVE: CVE-2014-0749 Vendor Homepage: http://www.adaptivecomputing.com/ Software Link:...

[CVE-2014-0749] TORQUE Buffer Overflow

A buffer overflow exists in versions of TORQUE which can be exploited in order to remotely execute code from an unauthenticated perspective. This issue is exploitable in all versions of the 2.5 branch, upto and including 2.5.13 Software: TORQUE Affected Versions: All 2.5 releases up to and...

TORQUE Resource Manager Stack Buffer Overflow Vulnerability

TORQUE Resource Manager is prone to stack buffer overflow vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2936-1 : torque - security update

John Fitzpatrick from MWR Labs reported a stack-based buffer overflow vulnerability in torque, a PBS-derived batch processing queueing system. An unauthenticated remote attacker could exploit this flaw to execute arbitrary code with root privileges. %NASLMINLEVEL 70300 C Tenable Network Security,...

[SECURITY] [DSA 2936-1] torque security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2936-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 23, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2936-1] torque security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2936-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 23, 2014 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2936-1 (torque - security update)

John Fitzpatrick from MWR Labs reported a stack-based buffer overflow vulnerability in torque, a PBS-derived batch processing queueing system. An unauthenticated remote attacker could exploit this flaw to execute arbitrary code with root privileges. OpenVAS Vulnerability Test $Id: deb2936.nasl 67...

DSA-2936-1 torque - security update

Bulletin has no description...

Debian: Security Advisory (DSA-2936-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-0749

Stack-based buffer overflow in lib/Libdis/disrsi.c in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager 2.5.x through 2.5.13 allows remote attackers to execute arbitrary code via a large count value...

UBUNTU-CVE-2014-0749

Stack-based buffer overflow in lib/Libdis/disrsi.c in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager 2.5.x through 2.5.13 allows remote attackers to execute arbitrary code via a large count value...

Stack overflow

Stack-based buffer overflow in lib/Libdis/disrsi.c in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager 2.5.x through 2.5.13 allows remote attackers to execute arbitrary code via a large count value...

CVE-2014-0749

CVE-2014-0749 is a stack-based buffer overflow in TORQUE Resource Manager 2.5.x up to 2.5.13 triggered while parsing the DIS network protocol, enabling remote code execution. Public disclosures and advisories describe an unauthenticated remote attacker exploiting a small buffer overflow to run ar...

CVE-2014-0749

Stack-based buffer overflow in lib/Libdis/disrsi.c in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager 2.5.x through 2.5.13 allows remote attackers to execute arbitrary code via a large count value...

CVE-2014-0749: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in lib/Libdis/disrsi.c in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager 2.5.x through 2.5.13 allows remote attackers to execute arbitrary code via a large count value...

Debian DSA-2796-1 : torque - arbitrary code execution

Matt Ezell from Oak Ridge National Labs reported a vulnerability in torque, a PBS-derived batch processing queueing system. A user could submit executable shell commands on the tail of what is passed with the -M switch for qsub. This was later passed to a pipe, making it possible for these comman...

CVE-2013-4495

The sendthemail function in server/svrmail.c in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email -M switch to qsub...

CVE-2013-4495

The sendthemail function in server/svrmail.c in Terascale Open-Source Resource and Queue Manager aka TORQUE Resource Manager before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email -M switch to qsub...