CVE-2013-4495

Publication date 20 November 2013

Last updated 24 July 2024


Ubuntu priority

The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email (-M switch) to qsub.

Status

Package Ubuntu Release Status
torque 15.04 vivid
Not affected
14.10 utopic
Not affected
14.04 LTS trusty
Not affected
13.10 saucy Ignored end of life
13.04 raring Ignored end of life
12.10 quantal Ignored end of life
12.04 LTS precise
Fixed 2.4.16+dfsg-1+deb7u4build0.12.04.1
10.04 LTS lucid Ignored end of life