CVE-2014-3684

Published: Oct 30, 2014Modified: May 6, 2026

6.8

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Exploitability: 8.0 / Impact: 6.9

Source: NVD

Description

The tm_adopt function in lib/Libifl/tm.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 5.0.x, 4.5.x, 4.2.x, and earlier does not validate that the owner of the process also owns the adopted session id, which allows remote authenticated users to kill arbitrary processes via a crafted executable.

Affected (11)

Products: Adaptivecomputing: Torque Resource Manager

Adaptivecomputing

1 product

Torque Resource Manager

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Adaptivecomputing Torque Resource Manager	Version 4.2.3.1
Adaptivecomputing Torque Resource Manager	Version 4.2.3
Adaptivecomputing Torque Resource Manager	Version 4.2.4.1
Adaptivecomputing Torque Resource Manager	Version 4.2.4
Adaptivecomputing Torque Resource Manager	Version 4.2.5
Adaptivecomputing Torque Resource Manager	Version 4.2.6.1
Adaptivecomputing Torque Resource Manager	Version 4.2.6
Adaptivecomputing Torque Resource Manager	Version 4.2.7
Adaptivecomputing Torque Resource Manager	Version 4.2.8
Adaptivecomputing Torque Resource Manager	Version 4.2.9
Adaptivecomputing Torque Resource Manager	Version 5.0.0-1_43d8f09a

Related CWEs

References (20)

http://advisories.mageia.org/MGASA-2014-0408.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159183.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159201.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159259.html

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2014/10/02/44

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2014/10/02/45

Source: secalert@redhat.com

http://secunia.com/advisories/61350

Source: secalert@redhat.com

http://secunia.com/advisories/61960

Source: secalert@redhat.com

http://www.debian.org/security/2014/dsa-3058

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2015:124

Source: secalert@redhat.com

http://advisories.mageia.org/MGASA-2014-0408.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159183.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159201.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159259.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2014/10/02/44

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2014/10/02/45

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/61350

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/61960

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2014/dsa-3058

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2015:124

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.