8.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
0.002 Low
EPSS
Percentile
64.3%
Multiple buffer overflows in Terascale Open-Source Resource and Queue
Manager (aka TORQUE Resource Manager) 2.x before 2.4.14, 2.5.x before
2.5.6, and 3.x before 3.0.2 allow (1) remote authenticated users to gain
privileges via a long Job_Name field in a qsub command to the server, and
might allow (2) local users to gain privileges via vectors involving a long
host variable in pbs_iff.