CVE-2014-3684

CVE-2014-3684 affects the TORQUE Resource Manager (lib/Libifl/tm.c, tm_adopt) across 5.0.x, 4.5.x, 4.2.x and earlier. The root cause is that the owner of a process is not validated to also own the adopted session id, enabling remote authenticated users to kill arbitrary processes via a crafted ex...

CVE-2014-0749

CVE-2014-0749 is a stack-based buffer overflow in TORQUE Resource Manager 2.5.x up to 2.5.13 triggered while parsing the DIS network protocol, enabling remote code execution. Public disclosures and advisories describe an unauthenticated remote attacker exploiting a small buffer overflow to run ar...