CVE-2011-2907 Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 3.0.1 and earlier allows remote attackers to bypass host-based authentication and submit arbitrary jobs via a modified PB...
HighCVSS 7.5
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 3.0.1 and earlier allows remote attackers to bypass host-based authentication and submit arbitrary jobs via a modified PBS_O_HOST variable to the qsub program.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| clusterresources torque resource manager | <= 3.0.1 | No fix listed |
| clusterresources torque resource manager | = 2.1.0 | No fix listed |
| clusterresources torque resource manager | = 2.1.0p11 | No fix listed |
| clusterresources torque resource manager | = 2.1.1 | No fix listed |
| clusterresources torque resource manager | = 2.1.2 | No fix listed |
| clusterresources torque resource manager | = 2.1.3 | No fix listed |
| clusterresources torque resource manager | = 2.1.6 | No fix listed |
| clusterresources torque resource manager | = 2.1.7 | No fix listed |
| clusterresources torque resource manager | = 2.1.8 | No fix listed |
| clusterresources torque resource manager | = 2.1.9 | No fix listed |
| clusterresources torque resource manager | = 2.1.10 | No fix listed |
| clusterresources torque resource manager | = 2.1.11 | No fix listed |
| clusterresources torque resource manager | = 2.2.1 | No fix listed |
| clusterresources torque resource manager | = 2.3.0 | No fix listed |
| clusterresources torque resource manager | = 2.3.1 | No fix listed |
| clusterresources torque resource manager | = 2.3.2 | No fix listed |
| clusterresources torque resource manager | = 2.3.3 | No fix listed |
| clusterresources torque resource manager | = 2.3.4 | No fix listed |
| clusterresources torque resource manager | = 2.3.5 | No fix listed |
| clusterresources torque resource manager | = 2.3.6 | No fix listed |
| clusterresources torque resource manager | = 2.3.7 | No fix listed |
| clusterresources torque resource manager | = 2.3.8 | No fix listed |
| clusterresources torque resource manager | = 2.3.9 | No fix listed |
| clusterresources torque resource manager | = 2.3.10 | No fix listed |
| clusterresources torque resource manager | = 2.3.11 | No fix listed |
Show 21 more
| Product | Affected versions | Fixed in |
|---|---|---|
| clusterresources torque resource manager | = 2.3.12 | No fix listed |
| clusterresources torque resource manager | = 2.3.13 | No fix listed |
| clusterresources torque resource manager | = 2.4.2 | No fix listed |
| clusterresources torque resource manager | = 2.4.3 | No fix listed |
| clusterresources torque resource manager | = 2.4.4 | No fix listed |
| clusterresources torque resource manager | = 2.4.5 | No fix listed |
| clusterresources torque resource manager | = 2.4.6 | No fix listed |
| clusterresources torque resource manager | = 2.4.7 | No fix listed |
| clusterresources torque resource manager | = 2.4.8 | No fix listed |
| clusterresources torque resource manager | = 2.4.9 | No fix listed |
| clusterresources torque resource manager | = 2.4.10 | No fix listed |
| clusterresources torque resource manager | = 2.4.11 | No fix listed |
| clusterresources torque resource manager | = 2.4.12 | No fix listed |
| clusterresources torque resource manager | = 2.4.13 | No fix listed |
| clusterresources torque resource manager | = 2.5.0 | No fix listed |
| clusterresources torque resource manager | = 2.5.1 | No fix listed |
| clusterresources torque resource manager | = 2.5.2 | No fix listed |
| clusterresources torque resource manager | = 2.5.3 | No fix listed |
| clusterresources torque resource manager | = 2.5.4 | No fix listed |
| clusterresources torque resource manager | = 2.5.5 | No fix listed |
| clusterresources torque resource manager | = 3.0.0 | No fix listed |
References
- 45524 third-party-advisory vendor-advisory
- [torqueusers] 20110809 TORQUE authorization security vulnerability mailing-list
- [oss-security] 20110810 CVE-2011-2907: authentication bypass in torque mailing-list
- 49119 vdb-entry
- bugzilla.redhat.com
- torque-resource-manager-pbsohost-sec-bypass(69138) vdb-entry
- wiki.egi.eu