Back to Database
Status published
Critical
CVE-2013-4495
The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and...
Vulnerability Description
The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email (-M switch) to qsub.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-4495
Credits & Attribution
No credits recorded in the NVD database.
References
More from adaptivecomputing
View All →CVE-2014-5376
Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0, when...
Medium
4
CVE-2014-5375
The server in Adaptive Computing Moab before 7.2.9 and 8...
Medium
4
CVE-2014-5300
Adaptive Computing Moab before 7.2.9 and 8 before 8.0.0 allows...
Medium
5
CVE-2014-3684
The tm_adopt function in lib/Libifl/tm.c in Terascale Open-Source Resource and...
Medium
6.8
CVE-2014-0749
Stack-based buffer overflow in lib/Libdis/disrsi_.c in Terascale Open-Source Resource and...
Critical
10
Affected Vendor
adaptivecomputing
View all reports →Affected Software
torque resource manager
Vulnerable Versions:
0, 2.0.0, 2.1.2, 2.1.3, 2.1.6, 2.1.7, 2.1.8, 2.1.9, 2.1.10, 2.1.11, 2.2.0, 2.2.1, 2.3.0, 2.3.1, 2.3.2, 2.3.3, 2.3.4, 2.3.5, 2.3.6, 2.3.7, 2.3.8, 2.3.9, 2.3.10, 2.3.11, 2.3.12, 2.3.13, 2.4.2, 2.4.3, 2.4.4, 2.4.5, 2.4.6, 2.4.7, 2.4.8, 2.4.9, 2.4.10, 2.4.11, 2.4.12, 2.4.13, 2.4.14, 2.4.15, 2.4.16, 2.4.17, 2.5.0, 2.5.1, 2.5.2, 2.5.3, 2.5.4, 2.5.5, 2.5.6, 2.5.7, 2.5.8, 2.5.9, 2.5.10, 2.5.11, 2.5.12, 2.5.13, 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 4.0.0, 4.0.2, 4.1.0, 4.1.1, 4.1.2, 4.1.3, 4.1.5.1, 4.1.6, 4.1.7, 4.2.2, 4.2.3, 4.2.3.1, 4.2.4.1
Timeline
Official Publish:
November 19th, 2013
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.