CVE-2013-4495

The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email (-M switch) to qsub.
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 89%
VendorProductVersion
adaptivecomputingtorque_resource_manager
𝑥
≤ 4.2.5
adaptivecomputingtorque_resource_manager
2.0.0
adaptivecomputingtorque_resource_manager
2.1.2
adaptivecomputingtorque_resource_manager
2.1.3
adaptivecomputingtorque_resource_manager
2.1.6
adaptivecomputingtorque_resource_manager
2.1.7
adaptivecomputingtorque_resource_manager
2.1.8
adaptivecomputingtorque_resource_manager
2.1.9
adaptivecomputingtorque_resource_manager
2.1.10
adaptivecomputingtorque_resource_manager
2.1.11
adaptivecomputingtorque_resource_manager
2.2.0
adaptivecomputingtorque_resource_manager
2.2.1
adaptivecomputingtorque_resource_manager
2.3.0
adaptivecomputingtorque_resource_manager
2.3.1
adaptivecomputingtorque_resource_manager
2.3.2
adaptivecomputingtorque_resource_manager
2.3.3
adaptivecomputingtorque_resource_manager
2.3.4
adaptivecomputingtorque_resource_manager
2.3.5
adaptivecomputingtorque_resource_manager
2.3.6
adaptivecomputingtorque_resource_manager
2.3.7
adaptivecomputingtorque_resource_manager
2.3.8
adaptivecomputingtorque_resource_manager
2.3.9
adaptivecomputingtorque_resource_manager
2.3.10
adaptivecomputingtorque_resource_manager
2.3.11
adaptivecomputingtorque_resource_manager
2.3.12
adaptivecomputingtorque_resource_manager
2.3.13
adaptivecomputingtorque_resource_manager
2.4.2
adaptivecomputingtorque_resource_manager
2.4.3
adaptivecomputingtorque_resource_manager
2.4.4
adaptivecomputingtorque_resource_manager
2.4.5
adaptivecomputingtorque_resource_manager
2.4.6
adaptivecomputingtorque_resource_manager
2.4.7
adaptivecomputingtorque_resource_manager
2.4.8
adaptivecomputingtorque_resource_manager
2.4.9
adaptivecomputingtorque_resource_manager
2.4.10
adaptivecomputingtorque_resource_manager
2.4.11
adaptivecomputingtorque_resource_manager
2.4.12
adaptivecomputingtorque_resource_manager
2.4.13
adaptivecomputingtorque_resource_manager
2.4.14
adaptivecomputingtorque_resource_manager
2.4.15
adaptivecomputingtorque_resource_manager
2.4.16
adaptivecomputingtorque_resource_manager
2.4.17
adaptivecomputingtorque_resource_manager
2.5.0
adaptivecomputingtorque_resource_manager
2.5.1
adaptivecomputingtorque_resource_manager
2.5.2
adaptivecomputingtorque_resource_manager
2.5.3
adaptivecomputingtorque_resource_manager
2.5.4
adaptivecomputingtorque_resource_manager
2.5.5
adaptivecomputingtorque_resource_manager
2.5.6
adaptivecomputingtorque_resource_manager
2.5.7
adaptivecomputingtorque_resource_manager
2.5.8
adaptivecomputingtorque_resource_manager
2.5.9
adaptivecomputingtorque_resource_manager
2.5.10
adaptivecomputingtorque_resource_manager
2.5.11
adaptivecomputingtorque_resource_manager
2.5.12
adaptivecomputingtorque_resource_manager
2.5.13
adaptivecomputingtorque_resource_manager
3.0.0
adaptivecomputingtorque_resource_manager
3.0.1
adaptivecomputingtorque_resource_manager
3.0.2
adaptivecomputingtorque_resource_manager
3.0.3
adaptivecomputingtorque_resource_manager
3.0.4
adaptivecomputingtorque_resource_manager
3.0.5
adaptivecomputingtorque_resource_manager
3.0.6
adaptivecomputingtorque_resource_manager
4.0.0
adaptivecomputingtorque_resource_manager
4.0.2
adaptivecomputingtorque_resource_manager
4.1.0
adaptivecomputingtorque_resource_manager
4.1.1
adaptivecomputingtorque_resource_manager
4.1.2
adaptivecomputingtorque_resource_manager
4.1.3
adaptivecomputingtorque_resource_manager
4.1.5.1
adaptivecomputingtorque_resource_manager
4.1.6
adaptivecomputingtorque_resource_manager
4.1.7
adaptivecomputingtorque_resource_manager
4.2.2
adaptivecomputingtorque_resource_manager
4.2.3
adaptivecomputingtorque_resource_manager
4.2.3.1
adaptivecomputingtorque_resource_manager
4.2.4.1
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
torque
vivid
not-affected
utopic
not-affected
trusty
not-affected
saucy
ignored
raring
ignored
quantal
ignored
precise
Fixed 2.4.16+dfsg-1+deb7u4build0.12.04.1
released
lucid
ignored
Common Weakness Enumeration
References
http://secunia.com/advisories/55535
http://secunia.com/advisories/55622
https://www.adaptivecomputing.com/wp-content/uploads/releasenotes/releaseNotes-4.2.6.html
https://www.debian.org/security/2013/dsa-2796
http://secunia.com/advisories/55535
http://secunia.com/advisories/55622
https://www.adaptivecomputing.com/wp-content/uploads/releasenotes/releaseNotes-4.2.6.html
https://www.debian.org/security/2013/dsa-2796