Mandriva Linux Security Advisory : torque (MDVSA-2013:268)
Critical Nessus Plugin ID 70968
SynopsisThe remote Mandriva Linux host is missing one or more security updates.
DescriptionUpdated torque packages fix security vulnerability :
A user could submit executable shell commands on the tail of what is passed with the -M switch for qsub. This was later passed to a pipe, making it possible for these commands to be executed as root on the pbs_server (CVE-2013-4495).
SolutionUpdate the affected packages.