Multiple buffer overflows in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.x before 2.4.14, 2.5.x before 2.5.6, and 3.x before 3.0.2 allow (1) remote authenticated users to gain privileges via a long Job_Name field in a qsub command to the server, and might allow (2) local users to gain privileges via vectors involving a long host variable in pbs_iff.

The remote host is affected by the vulnerability described in GLSA-201412-47 (TORQUE Resource Manager: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in TORQUE Resource       Manager. Please review the CVE identifiers referenced below for details.
  Impact :

    A context-dependent attacker may be able to gain escalated privileges,       execute arbitrary code, or bypass security restrictions.
  Workaround :

    There is no known workaround at this time.

Bartlomiej Balcerek discovered several buffer overflows in TORQUE server, a PBS-derived batch processing server. This allows an attacker to crash the service or execute arbitrary code with privileges of the server via crafted job or host names.

The oldstable distribution (lenny) does not contain torque.

This update fixes a buffer overflow that could allow for remote arbitrary code execution by a torque service. Credit to Bartlomiej Balcerek - CVE-2011-2193.

Warning: Packages previous to torque-3.0.1-4.fc15 within Fedora 15 contained the empty file /var/lib/torque/server_priv/nodes . This file is a listing of the nodes within your torque cluster and as such it should survive intact with upgrades. This file has now been removed from the package with torque-3.0.1-4.fc15 but it is essential that you backup and restore this file before and then after installing torque-3.0.1-4.fc15.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update fixes a buffer overflow that could allow for remote arbitrary code execution by a torque service. Credit to Bartlomiej Balcerek - CVE-2011-2193.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Type	Severity
80268	GLSA-201412-47 : TORQUE Resource Manager: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	critical
56662	Debian DSA-2329-1 : torque - buffer overflow	Nessus	Debian Local Security Checks	Local	high
55578	Fedora 15 : torque-3.0.1-4.fc15 (2011-8072)	Nessus	Fedora Local Security Checks	Local	high
55394	Fedora 14 : torque-2.4.11-2.fc14 (2011-8117)	Nessus	Fedora Local Security Checks	Local	high

Detections

Analytics

CVE-2011-2193

high

Tenable Plugins

critical

high

high

high