CVEvulnerability

CVE-2013-4495

10.0 HIGH Published 2013-11-20 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-11-20
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-94

Description

The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email (-M switch) to qsub.

Affected configurations

• adaptivecomputing torque resource manager (<= 4.2.5) • adaptivecomputing torque resource manager 2.0.0 • adaptivecomputing torque resource manager 2.1.2 • adaptivecomputing torque resource manager 2.1.3 • adaptivecomputing torque resource manager 2.1.6 • adaptivecomputing torque resource manager 2.1.7 • adaptivecomputing torque resource manager 2.1.8 • adaptivecomputing torque resource manager 2.1.9 • adaptivecomputing torque resource manager 2.1.10 • adaptivecomputing torque resource manager 2.1.11 • adaptivecomputing torque resource manager 2.2.0 • adaptivecomputing torque resource manager 2.2.1 • adaptivecomputing torque resource manager 2.3.0 • adaptivecomputing torque resource manager 2.3.1 • adaptivecomputing torque resource manager 2.3.2 • adaptivecomputing torque resource manager 2.3.3 • adaptivecomputing torque resource manager 2.3.4 • adaptivecomputing torque resource manager 2.3.5 • adaptivecomputing torque resource manager 2.3.6 • adaptivecomputing torque resource manager 2.3.7 • adaptivecomputing torque resource manager 2.3.8 • adaptivecomputing torque resource manager 2.3.9 • adaptivecomputing torque resource manager 2.3.10 • adaptivecomputing torque resource manager 2.3.11 • adaptivecomputing torque resource manager 2.3.12 • adaptivecomputing torque resource manager 2.3.13 • adaptivecomputing torque resource manager 2.4.2 • adaptivecomputing torque resource manager 2.4.3 • adaptivecomputing torque resource manager 2.4.4 • adaptivecomputing torque resource manager 2.4.5 • adaptivecomputing torque resource manager 2.4.6 • adaptivecomputing torque resource manager 2.4.7 • adaptivecomputing torque resource manager 2.4.8 • adaptivecomputing torque resource manager 2.4.9 • adaptivecomputing torque resource manager 2.4.10 • adaptivecomputing torque resource manager 2.4.11 • adaptivecomputing torque resource manager 2.4.12 • adaptivecomputing torque resource manager 2.4.13 • adaptivecomputing torque resource manager 2.4.14 • adaptivecomputing torque resource manager 2.4.15 • adaptivecomputing torque resource manager 2.4.16 • adaptivecomputing torque resource manager 2.4.17 • adaptivecomputing torque resource manager 2.5.0 • adaptivecomputing torque resource manager 2.5.1 • adaptivecomputing torque resource manager 2.5.2 • adaptivecomputing torque resource manager 2.5.3 • adaptivecomputing torque resource manager 2.5.4 • adaptivecomputing torque resource manager 2.5.5 • adaptivecomputing torque resource manager 2.5.6 • adaptivecomputing torque resource manager 2.5.7 • adaptivecomputing torque resource manager 2.5.8 • adaptivecomputing torque resource manager 2.5.9 • adaptivecomputing torque resource manager 2.5.10 • adaptivecomputing torque resource manager 2.5.11 • adaptivecomputing torque resource manager 2.5.12 • adaptivecomputing torque resource manager 2.5.13 • adaptivecomputing torque resource manager 3.0.0 • adaptivecomputing torque resource manager 3.0.1 • adaptivecomputing torque resource manager 3.0.2 • adaptivecomputing torque resource manager 3.0.3 … and 16 more

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References