CVE-2014-3684
- State
- Published
- Severity
- Not scored
- Published
- Oct 30, 2014
- Updated
- Aug 6, 2024
- Reserved
- May 14, 2014
Description
The tm_adopt function in lib/Libifl/tm.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 5.0.x, 4.5.x, 4.2.x, and earlier does not validate that the owner of the process also owns the adopted session id, which allows remote authenticated users to kill arbitrary processes via a crafted executable.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- FEDORA-2015-8577vendor-advisory
- [oss-security] 20141003 Re: tm_adopt() vulnerability in TORQUE Resource Managermailing-list
- http://advisories.mageia.org/MGASA-2014-0408.html
- FEDORA-2015-8544vendor-advisory
- 61960third-party-advisory
- FEDORA-2015-8571vendor-advisory
- DSA-3058vendor-advisory
- MDVSA-2015:124vendor-advisory
- [oss-security] 20141002 tm_adopt() vulnerability in TORQUE Resource Managermailing-list
- 61350third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.