CVE-2013-4495

The vulnerability CVE-2013-4495 affects TORQUE Resource Manager before 4.2.6, where the send_the_mail function in server/svr_mail.c allows remote attackers to execute arbitrary commands via shell metacharacters in the email (-M) switch to qsub. This is a remote, unauthenticated vector with high i...

CVE-2013-4319

CVE-2013-4319 affects TORQUE Resource Manager’s pbs_mom, where improper access control on unprivileged ports allows remote authenticated users to submit commands and execute arbitrary jobs. Affected versions include TORQUE 2.5.x, 4.x, and earlier. Root cause: failure to properly restrict access b...