CVE-2011-2193
- State
- Published
- Severity
- Not scored
- Published
- Jun 24, 2011
- Updated
- Aug 6, 2024
- Reserved
- May 31, 2011
Description
Multiple buffer overflows in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.x before 2.4.14, 2.5.x before 2.5.6, and 3.x before 3.0.2 allow (1) remote authenticated users to gain privileges via a long Job_Name field in a qsub command to the server, and might allow (2) local users to gain privileges via vectors involving a long host variable in pbs_iff.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- FEDORA-2011-8117vendor-advisory
- DSA-2329vendor-advisory
- http://www.clusterresources.com/downloads/torque/CHANGELOGS/torque-2.5.6.CHANGELOG
- 45039third-party-advisory
- FEDORA-2011-8072vendor-advisory
- 20110713 Torque Server Buffer Overflow Vulnerabilitymailing-list
- 45040third-party-advisory
- 8304third-party-advisory
- http://www.clusterresources.com/downloads/torque/CHANGELOGS/torque-2.4.14.CHANGELOG
- 48374vdb-entry
- torque-hostnames-bo(68152)vdb-entry
- torque-jobnames-bo(68151)vdb-entry
- https://bugzilla.redhat.com/show_bug.cgi?id=711463
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.