CVE-2011-2193 (GCVE-0-2011-2193)

Vulnerability from cvelistv5 – Published: 2011-06-24 20:00 – Updated: 2024-08-06 22:53
VLAI
Summary
Multiple buffer overflows in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.x before 2.4.14, 2.5.x before 2.5.6, and 3.x before 3.0.2 allow (1) remote authenticated users to gain privileges via a long Job_Name field in a qsub command to the server, and might allow (2) local users to gain privileges via vectors involving a long host variable in pbs_iff.
Severity
No CVSS data available.
CWE
  • n/a
References
URL Tags
http://lists.fedoraproject.org/pipermail/package-… vendor-advisoryx_refsource_FEDORA
http://www.debian.org/security/2011/dsa-2329 vendor-advisoryx_refsource_DEBIAN
http://www.clusterresources.com/downloads/torque/… x_refsource_CONFIRM
http://secunia.com/advisories/45039 third-party-advisoryx_refsource_SECUNIA
http://lists.fedoraproject.org/pipermail/package-… vendor-advisoryx_refsource_FEDORA
http://www.securityfocus.com/archive/1/518885/100… mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/45040 third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/8304 third-party-advisoryx_refsource_SREASON
http://www.clusterresources.com/downloads/torque/… x_refsource_CONFIRM
http://www.securityfocus.com/bid/48374 vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
https://bugzilla.redhat.com/show_bug.cgi?id=711463 x_refsource_CONFIRM
Date Public
2011-05-31 00:00
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:53:17.202Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2011-8117",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061645.html"
          },
          {
            "name": "DSA-2329",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2011/dsa-2329"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.clusterresources.com/downloads/torque/CHANGELOGS/torque-2.5.6.CHANGELOG"
          },
          {
            "name": "45039",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/45039"
          },
          {
            "name": "FEDORA-2011-8072",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062638.html"
          },
          {
            "name": "20110713 Torque Server Buffer Overflow Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/518885/100/0/threaded"
          },
          {
            "name": "45040",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/45040"
          },
          {
            "name": "8304",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8304"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.clusterresources.com/downloads/torque/CHANGELOGS/torque-2.4.14.CHANGELOG"
          },
          {
            "name": "48374",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/48374"
          },
          {
            "name": "torque-hostnames-bo(68152)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68152"
          },
          {
            "name": "torque-jobnames-bo(68151)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68151"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=711463"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-05-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple buffer overflows in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.x before 2.4.14, 2.5.x before 2.5.6, and 3.x before 3.0.2 allow (1) remote authenticated users to gain privileges via a long Job_Name field in a qsub command to the server, and might allow (2) local users to gain privileges via vectors involving a long host variable in pbs_iff."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-09T18:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "FEDORA-2011-8117",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061645.html"
        },
        {
          "name": "DSA-2329",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2011/dsa-2329"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.clusterresources.com/downloads/torque/CHANGELOGS/torque-2.5.6.CHANGELOG"
        },
        {
          "name": "45039",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/45039"
        },
        {
          "name": "FEDORA-2011-8072",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062638.html"
        },
        {
          "name": "20110713 Torque Server Buffer Overflow Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/518885/100/0/threaded"
        },
        {
          "name": "45040",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/45040"
        },
        {
          "name": "8304",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8304"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.clusterresources.com/downloads/torque/CHANGELOGS/torque-2.4.14.CHANGELOG"
        },
        {
          "name": "48374",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/48374"
        },
        {
          "name": "torque-hostnames-bo(68152)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68152"
        },
        {
          "name": "torque-jobnames-bo(68151)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68151"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=711463"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2011-2193",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple buffer overflows in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.x before 2.4.14, 2.5.x before 2.5.6, and 3.x before 3.0.2 allow (1) remote authenticated users to gain privileges via a long Job_Name field in a qsub command to the server, and might allow (2) local users to gain privileges via vectors involving a long host variable in pbs_iff."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "FEDORA-2011-8117",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061645.html"
            },
            {
              "name": "DSA-2329",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2011/dsa-2329"
            },
            {
              "name": "http://www.clusterresources.com/downloads/torque/CHANGELOGS/torque-2.5.6.CHANGELOG",
              "refsource": "CONFIRM",
              "url": "http://www.clusterresources.com/downloads/torque/CHANGELOGS/torque-2.5.6.CHANGELOG"
            },
            {
              "name": "45039",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/45039"
            },
            {
              "name": "FEDORA-2011-8072",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062638.html"
            },
            {
              "name": "20110713 Torque Server Buffer Overflow Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/518885/100/0/threaded"
            },
            {
              "name": "45040",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/45040"
            },
            {
              "name": "8304",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/8304"
            },
            {
              "name": "http://www.clusterresources.com/downloads/torque/CHANGELOGS/torque-2.4.14.CHANGELOG",
              "refsource": "CONFIRM",
              "url": "http://www.clusterresources.com/downloads/torque/CHANGELOGS/torque-2.4.14.CHANGELOG"
            },
            {
              "name": "48374",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/48374"
            },
            {
              "name": "torque-hostnames-bo(68152)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68152"
            },
            {
              "name": "torque-jobnames-bo(68151)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68151"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=711463",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=711463"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2011-2193",
    "datePublished": "2011-06-24T20:00:00.000Z",
    "dateReserved": "2011-05-31T00:00:00.000Z",
    "dateUpdated": "2024-08-06T22:53:17.202Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2011-2193",
      "date": "2026-09-22",
      "epss": "0.02503",
      "percentile": "0.84014"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.1.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "3A0E0AA0-5605-4AFD-9F97-BD8AF651BABC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.1.0p11:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C4D4148C-AC29-4DAD-B4E4-8F7E31BD07B0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.1.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EA761446-8547-4947-9D4E-E086B87075A1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.1.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "899B8050-CFAE-433D-812A-5CDEBFDA4567",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.1.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8C54F40A-E0C8-4C3A-AFAD-95A4DA7EA928",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.1.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B26921CD-7FE0-4241-B887-26D430708C11",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.1.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0FD9F5FA-40D5-4C69-8C53-CE562B44022F",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.1.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6414C31C-687A-4707-B8EB-2F31534EFF3B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.1.9:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9269D021-686E-4983-8883-2E5C4BA5A557",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.1.10:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7ACE64A0-D65F-4C14-A231-ED00DB87E2FB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.1.11:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0A5CD0E9-26BD-44A2-B803-FB9B95E01F78",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.2.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8FC592A6-BBA5-4F28-B3A8-A0B125B6E8A7",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "305479E9-39E7-4121-8937-C9E44893B9C0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C95ADDC1-1F6F-4CAA-94E7-C7B5A503D144",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4A7F56B2-0121-4C1B-B08A-7AE0B84755DD",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "523EB787-7589-4CDE-9213-79139D445C9D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C9712C71-A018-4526-8434-51E1F5602687",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1483A5DA-228C-4CEE-9D1B-728268BCA1E2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "28F19311-C9B9-4103-893D-6950E992847E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1FE4DFBE-868E-4A7B-B933-4E3EB4D5F3C1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CDD8A7A5-8910-4797-A54E-BC427810FB78",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.9:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B0C3BF00-79D6-47CB-9E33-D6BBA4EAFE05",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.10:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E3425F0A-7128-4832-ACB6-8F68CE5EBB6B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.11:*:*:*:*:*:*:*",
                    "matchCriteriaId": "2AD53862-C791-4566-999D-3F82982ED609",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.12:*:*:*:*:*:*:*",
                    "matchCriteriaId": "903E8441-F7C4-4BA7-BF5A-34094A040EFC",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.13:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4C9F9DF5-EA89-4279-B23A-2AA525A48DEB",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "10175C93-93A0-4C93-883B-F88B4A0DD12E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ACC98979-3F42-41A8-B9E1-7B0DB5398FB0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D4C90506-2DC2-41AE-B308-F94C1A8847EA",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "54AB15BC-1566-4F82-966D-D5D6929F6F6D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "477D5192-5E68-46AB-AB9E-0CE39CBF578D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E6ED0C2B-ADE7-4DB6-82CA-B17D7A277A93",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "EAE061D1-0E17-4B6C-A500-F3DA9DDD605E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.9:*:*:*:*:*:*:*",
                    "matchCriteriaId": "85EE8536-0C3D-48EC-9D5A-D2504D91814C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.10:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E84D3308-08B8-4F41-A089-63C327E61D70",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.11:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0EA067A0-C187-46B4-A1D8-FCCC5118893D",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.12:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6464ADEA-13EA-4143-83B3-534CDDA22A1C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.13:*:*:*:*:*:*:*",
                    "matchCriteriaId": "7B8588AF-57AB-4F31-83D4-50225B6A95F0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.5.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "768C7BE5-040F-4F3B-B62C-03F69D8C4558",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.5.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5ECD0992-A16E-46A5-8D34-5E0B99FA8B52",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.5.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ECD0C163-1EA5-4587-95F4-EDF7F3266C0A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.5.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C972A572-9274-4B10-A359-40F200D453A1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.5.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "26B0922B-986B-4BF1-A6E6-C954AB1A51A4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.5.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "53E3F3C8-E27D-42DC-A73F-56F78DCD0828",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:3.0.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AAC6B2BE-582E-4944-B3A0-AD7A9F626D4C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:3.0.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DB5FD8CA-46D4-4D1A-97A2-8F43AAA1A34F",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Multiple buffer overflows in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.x before 2.4.14, 2.5.x before 2.5.6, and 3.x before 3.0.2 allow (1) remote authenticated users to gain privileges via a long Job_Name field in a qsub command to the server, and might allow (2) local users to gain privileges via vectors involving a long host variable in pbs_iff."
          },
          {
            "lang": "es",
            "value": "M\u00faltiples desbordamientos de b\u00fafer en Terascale Open-Source Resource and Queue Manager (tambi\u00e9n conocido como TORQUE Resource Manager) v2.x antes de v2.4.14, v2.5.x antes de v2.5.6 y 3.x antes de v3.0.2 permiten que (1) \r\nusuarios remotos autenticados obtengan privilegios a trav\u00e9s de un campo Job_name demasiado largo en un comando qsub al servidor, y podr\u00edan permitir (2) a usuarios locales conseguir privilegios a trav\u00e9s de vectores \r\nrelacionados con una variable de huesped de huesped demasiado larga en pbs_iff."
          }
        ],
        "id": "CVE-2011-2193",
        "lastModified": "2026-04-29T01:13:23.040",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "SINGLE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 8.5,
                "confidentialityImpact": "COMPLETE",
                "integrityImpact": "COMPLETE",
                "vectorString": "AV:N/AC:M/Au:S/C:C/I:C/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 6.8,
              "impactScore": 10.0,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2011-06-24T20:55:03.717",
        "references": [
          {
            "source": "secalert@redhat.com",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062638.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061645.html"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/45039"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/45040"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://securityreason.com/securityalert/8304"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.clusterresources.com/downloads/torque/CHANGELOGS/torque-2.4.14.CHANGELOG"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.clusterresources.com/downloads/torque/CHANGELOGS/torque-2.5.6.CHANGELOG"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.debian.org/security/2011/dsa-2329"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/archive/1/518885/100/0/threaded"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/bid/48374"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=711463"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68151"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68152"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062638.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061645.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/45039"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/45040"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securityreason.com/securityalert/8304"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.clusterresources.com/downloads/torque/CHANGELOGS/torque-2.4.14.CHANGELOG"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.clusterresources.com/downloads/torque/CHANGELOGS/torque-2.5.6.CHANGELOG"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.debian.org/security/2011/dsa-2329"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/518885/100/0/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/48374"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=711463"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68151"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68152"
          }
        ],
        "sourceIdentifier": "secalert@redhat.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-119"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…