MidnightBSD

Advisories for clusterresources

CVE-2011-2193 HIGH

Multiple buffer overflows in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.x before 2.4.14, 2.5.x before 2.5.6, and 3.x before 3.0.2 allow (1) remote authenticated users to gain privileges via a long Job_Name field in a qsub command to the server, and might allow (2) local users to gain privileges via vectors involving a long host variable in pbs_iff.

CVSS 2.0

Severity: HIGH

Problem Type: CWE-119,

Products Affected

Vendor Product Version
clusterresources torque_resource_manager 2.3.3
clusterresources torque_resource_manager 2.4.2
clusterresources torque_resource_manager 2.5.5
clusterresources torque_resource_manager 2.4.6
clusterresources torque_resource_manager 2.3.2
clusterresources torque_resource_manager 2.3.9
clusterresources torque_resource_manager 2.1.2
clusterresources torque_resource_manager 2.3.4
clusterresources torque_resource_manager 2.2.1
clusterresources torque_resource_manager 2.4.13
clusterresources torque_resource_manager 2.4.3
clusterresources torque_resource_manager 2.4.12
clusterresources torque_resource_manager 2.1.1
clusterresources torque_resource_manager 2.5.0
clusterresources torque_resource_manager 2.5.2
clusterresources torque_resource_manager 2.1.9
clusterresources torque_resource_manager 2.1.11
clusterresources torque_resource_manager 2.1.7
clusterresources torque_resource_manager 2.4.11
clusterresources torque_resource_manager 2.4.10
clusterresources torque_resource_manager 2.3.0
clusterresources torque_resource_manager 2.4.7
clusterresources torque_resource_manager 2.4.8
clusterresources torque_resource_manager 2.1.3
clusterresources torque_resource_manager 3.0.1
clusterresources torque_resource_manager 2.1.6
clusterresources torque_resource_manager 2.3.10
clusterresources torque_resource_manager 2.1.0p11
clusterresources torque_resource_manager 2.5.1
clusterresources torque_resource_manager 2.3.5
clusterresources torque_resource_manager 2.3.6
clusterresources torque_resource_manager 2.3.8
clusterresources torque_resource_manager 2.3.13
clusterresources torque_resource_manager 2.4.9
clusterresources torque_resource_manager 2.3.7
clusterresources torque_resource_manager 2.3.11
clusterresources torque_resource_manager 2.4.4
clusterresources torque_resource_manager 2.1.0
clusterresources torque_resource_manager 2.4.5
clusterresources torque_resource_manager 2.1.8
clusterresources torque_resource_manager 2.3.12
clusterresources torque_resource_manager 2.5.3
clusterresources torque_resource_manager 2.1.10
clusterresources torque_resource_manager 2.3.1
clusterresources torque_resource_manager 2.5.4
clusterresources torque_resource_manager 3.0.0
CVE-2011-2907 HIGH

Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 3.0.1 and earlier allows remote attackers to bypass host-based authentication and submit arbitrary jobs via a modified PBS_O_HOST variable to the qsub program.

CVSS 2.0

Severity: HIGH

Problem Type: CWE-287,

Products Affected

Vendor Product Version
clusterresources torque_resource_manager 2.3.3
clusterresources torque_resource_manager 2.4.2
clusterresources torque_resource_manager 2.5.5
clusterresources torque_resource_manager 2.4.6
clusterresources torque_resource_manager 2.3.2
clusterresources torque_resource_manager 2.3.9
clusterresources torque_resource_manager 2.1.2
clusterresources torque_resource_manager 2.3.4
clusterresources torque_resource_manager 2.2.1
clusterresources torque_resource_manager *
clusterresources torque_resource_manager 2.4.13
clusterresources torque_resource_manager 2.4.3
clusterresources torque_resource_manager 2.4.12
clusterresources torque_resource_manager 2.1.1
clusterresources torque_resource_manager 2.5.0
clusterresources torque_resource_manager 2.5.2
clusterresources torque_resource_manager 2.1.9
clusterresources torque_resource_manager 2.1.11
clusterresources torque_resource_manager 2.1.7
clusterresources torque_resource_manager 2.4.11
clusterresources torque_resource_manager 2.4.10
clusterresources torque_resource_manager 2.3.0
clusterresources torque_resource_manager 2.4.7
clusterresources torque_resource_manager 2.4.8
clusterresources torque_resource_manager 2.1.3
clusterresources torque_resource_manager 2.1.6
clusterresources torque_resource_manager 2.3.10
clusterresources torque_resource_manager 2.1.0p11
clusterresources torque_resource_manager 2.5.1
clusterresources torque_resource_manager 2.3.5
clusterresources torque_resource_manager 2.3.6
clusterresources torque_resource_manager 2.3.8
clusterresources torque_resource_manager 2.3.13
clusterresources torque_resource_manager 2.4.9
clusterresources torque_resource_manager 2.3.7
clusterresources torque_resource_manager 2.3.11
clusterresources torque_resource_manager 2.4.4
clusterresources torque_resource_manager 2.1.0
clusterresources torque_resource_manager 2.4.5
clusterresources torque_resource_manager 2.1.8
clusterresources torque_resource_manager 2.3.12
clusterresources torque_resource_manager 2.5.3
clusterresources torque_resource_manager 2.1.10
clusterresources torque_resource_manager 2.3.1
clusterresources torque_resource_manager 2.5.4
clusterresources torque_resource_manager 3.0.0
CVE-2011-4925 MEDIUM

Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 2.5.9, when munge authentication is used, allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-264,

Products Affected

Vendor Product Version
clusterresources torque_resource_manager 2.4.2
clusterresources torque_resource_manager 2.4.6
cluster_resources torque_resource_manager 1.1.0p2
cluster_resources torque_resource_manager 2.0.0p2
clusterresources torque_resource_manager 2.3.2
cluster_resources torque_resource_manager 1.0.1p1
clusterresources torque_resource_manager 2.3.9
clusterresources torque_resource_manager 2.1.2
cluster_resources torque_resource_manager 1.2.0p1
cluster_resources torque_resource_manager 1.2.0p2
clusterresources torque_resource_manager 2.5.6
cluster_resources torque_resource_manager 1.2.0p5
cluster_resources torque_resource_manager 2.0.0p1
clusterresources torque_resource_manager 2.5.2
cluster_resources torque_resource_manager 1.0.1p5
cluster_resources torque_resource_manager 1.1.0p3
clusterresources torque_resource_manager 2.3.0
cluster_resources torque_resource_manager 1.2.0p0
clusterresources torque_resource_manager 2.1.0p0
clusterresources torque_resource_manager 2.5.7
clusterresources torque_resource_manager 2.3.10
clusterresources torque_resource_manager 2.5.1
cluster_resources torque_resource_manager 1.2.0p6
clusterresources torque_resource_manager 2.3.8
clusterresources torque_resource_manager 2.4.9
clusterresources torque_resource_manager 2.3.7
clusterresources torque_resource_manager 2.4.4
cluster_resources torque_resource_manager 1.1.0p4
cluster_resources torque_resource_manager 2.0.0p3
clusterresources torque_resource_manager 2.3.3
clusterresources torque_resource_manager 2.5.5
cluster_resources torque_resource_manager 1.0.1p4
clusterresources torque_resource_manager 2.4.0
cluster_resources torque_resource_manager 1.1.0p5
cluster_resources torque_resource_manager 1.1.0p0
cluster_resources torque_resource_manager 2.0.0p4
cluster_resources torque_resource_manager 1.1.0p1
clusterresources torque_resource_manager 2.3.4
cluster_resources torque_resource_manager 1.1.0p6
clusterresources torque_resource_manager *
cluster_resources torque_resource_manager 2.0.0p0
clusterresources torque_resource_manager 2.4.3
clusterresources torque_resource_manager 2.4.12
clusterresources torque_resource_manager 2.1.1
clusterresources torque_resource_manager 2.5.0
cluster_resources torque_resource_manager 1.0.1p6
clusterresources torque_resource_manager 2.2.0
cluster_resources torque_resource_manager 2.0.0p6
cluster_resources torque_resource_manager 1.2.0p4
clusterresources torque_resource_manager 2.4.11
clusterresources torque_resource_manager 2.4.10
cluster_resources torque_resource_manager 1.0.1p3
clusterresources torque_resource_manager 2.4.7
clusterresources torque_resource_manager 2.4.8
cluster_resources torque_resource_manager 1.0.1p0
clusterresources torque_resource_manager 2.4.1
clusterresources torque_resource_manager 2.3.5
clusterresources torque_resource_manager 2.3.6
clusterresources torque_resource_manager 2.3.11
cluster_resources torque_resource_manager 2.0.0p5
clusterresources torque_resource_manager 2.4.5
cluster_resources torque_resource_manager 1.2.0p3
clusterresources torque_resource_manager 2.3.12
clusterresources torque_resource_manager 2.5.3
clusterresources torque_resource_manager 2.3.1
clusterresources torque_resource_manager 2.5.4
cluster_resources torque_resource_manager 1.0.1p2