CVE-2006-5677

Published: Nov 3, 2006Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

resmom/start_exec.c in pbs_mom in TORQUE Resource Manager 2.0.0p8 and earlier allows local users to create arbitrary files via a symlink attack on (1) a job output file in /usr/spool/PBS/spool and possibly (2) a job file in /usr/spool/PBS/mom_priv/jobs.

Affected (1)

Products: Cluster Resources: Torque Resource Manager

Cluster Resources

1 product

Torque Resource Manager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cluster Resources Torque Resource Manager	Up to 2.0.0p8

References (12)

http://csirt.fe.up.pt/docs/TORQUE-audit.pdf

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200611-14.xml

Source: cve@mitre.org

http://securityreason.com/securityalert/1820

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/449248/100/200/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/20632

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/4651

Source: cve@mitre.org

http://csirt.fe.up.pt/docs/TORQUE-audit.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200611-14.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/1820

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/449248/100/200/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/20632

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.vupen.com/english/advisories/2006/4651

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.