CVE-2013-4495

Published Nov 19, 2013 CVSS 2.0 · 10.0 Critical EPSS 3.3% KEV · Not listed
Description
The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email (-M switch) to qsub.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2796-1 torque security update
EUVD EUVD EUVD-2013-4357 The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email (-M switch) to qsub.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 4:45 PM
Reserved
Jun 12, 2013, 12:00 AM
Status
Modified
Published
Nov 20, 2013, 2:12 PM
Modified
Jun 16, 2026, 11:57 PM