10
CVSSv2

CVE-2013-4495

Published: 20/11/2013 Updated: 08/12/2016
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) prior to 4.2.6 allows remote malicious users to execute arbitrary commands via shell metacharacters in the email (-M switch) to qsub.

Vulnerable Product Search on Vulmon Subscribe to Product

adaptivecomputing torque resource manager

adaptivecomputing torque resource manager 4.1.5.1

adaptivecomputing torque resource manager 4.1.3

adaptivecomputing torque resource manager 3.0.4

adaptivecomputing torque resource manager 3.0.3

adaptivecomputing torque resource manager 2.5.6

adaptivecomputing torque resource manager 2.5.5

adaptivecomputing torque resource manager 2.5.10

adaptivecomputing torque resource manager 2.5.1

adaptivecomputing torque resource manager 2.5.0

adaptivecomputing torque resource manager 2.4.3

adaptivecomputing torque resource manager 2.4.2

adaptivecomputing torque resource manager 2.4.11

adaptivecomputing torque resource manager 2.4.10

adaptivecomputing torque resource manager 2.3.3

adaptivecomputing torque resource manager 2.3.2

adaptivecomputing torque resource manager 2.3.13

adaptivecomputing torque resource manager 2.2.0

adaptivecomputing torque resource manager 2.1.9

adaptivecomputing torque resource manager 2.1.10

adaptivecomputing torque resource manager 2.0.0

adaptivecomputing torque resource manager 4.2.4.1

adaptivecomputing torque resource manager 4.2.3.1

adaptivecomputing torque resource manager 4.1.2

adaptivecomputing torque resource manager 4.1.1

adaptivecomputing torque resource manager 4.1.0

adaptivecomputing torque resource manager 3.0.2

adaptivecomputing torque resource manager 3.0.1

adaptivecomputing torque resource manager 2.5.4

adaptivecomputing torque resource manager 2.5.3

adaptivecomputing torque resource manager 2.4.9

adaptivecomputing torque resource manager 2.4.8

adaptivecomputing torque resource manager 2.4.17

adaptivecomputing torque resource manager 2.4.16

adaptivecomputing torque resource manager 2.3.9

adaptivecomputing torque resource manager 2.3.8

adaptivecomputing torque resource manager 2.3.12

adaptivecomputing torque resource manager 2.3.11

adaptivecomputing torque resource manager 2.1.8

adaptivecomputing torque resource manager 2.1.7

adaptivecomputing torque resource manager 4.1.7

adaptivecomputing torque resource manager 4.1.6

adaptivecomputing torque resource manager 3.0.6

adaptivecomputing torque resource manager 3.0.5

adaptivecomputing torque resource manager 2.5.8

adaptivecomputing torque resource manager 2.5.7

adaptivecomputing torque resource manager 2.5.12

adaptivecomputing torque resource manager 2.5.11

adaptivecomputing torque resource manager 2.4.5

adaptivecomputing torque resource manager 2.4.4

adaptivecomputing torque resource manager 2.4.13

adaptivecomputing torque resource manager 2.4.12

adaptivecomputing torque resource manager 2.3.5

adaptivecomputing torque resource manager 2.3.4

adaptivecomputing torque resource manager 2.3.0

adaptivecomputing torque resource manager 2.2.1

adaptivecomputing torque resource manager 2.1.2

adaptivecomputing torque resource manager 2.1.11

adaptivecomputing torque resource manager 4.2.3

adaptivecomputing torque resource manager 4.2.2

adaptivecomputing torque resource manager 4.0.2

adaptivecomputing torque resource manager 4.0.0

adaptivecomputing torque resource manager 3.0.0

adaptivecomputing torque resource manager 2.5.9

adaptivecomputing torque resource manager 2.5.2

adaptivecomputing torque resource manager 2.5.13

adaptivecomputing torque resource manager 2.4.7

adaptivecomputing torque resource manager 2.4.6

adaptivecomputing torque resource manager 2.4.15

adaptivecomputing torque resource manager 2.4.14

adaptivecomputing torque resource manager 2.3.7

adaptivecomputing torque resource manager 2.3.6

adaptivecomputing torque resource manager 2.3.10

adaptivecomputing torque resource manager 2.3.1

adaptivecomputing torque resource manager 2.1.6

adaptivecomputing torque resource manager 2.1.3

Vendor Advisories

Matt Ezell from Oak Ridge National Labs reported a vulnerability in torque, a PBS-derived batch processing queueing system A user could submit executable shell commands on the tail of what is passed with the -M switch for qsub This was later passed to a pipe, making it possible for these commands to be executed as root on the pbs_server For the ...