PT-2012-2001 · Terascale · Torque Resource Manager

Agostino Sarubbo · Published 2012-01-13 · Updated 2012-02-02 · CVE-2011-4925

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) versions prior to 2.5.9

Description The issue allows remote authenticated users to impersonate arbitrary user accounts when munge authentication is used.

Recommendations For versions prior to 2.5.9, update to version 2.5.9 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-4925

Affected Products

Torque Resource Manager

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2011-4925 · Security Note
• http://secunia.com/advisories/47381 · Vendor Advisory
• http://openwall.com/lists/oss-security/2012/01/05/9 · Patch
• http://securityfocus.com/bid/51224 · Note
• http://openwall.com/lists/oss-security/2012/01/05/1 · Note
• http://adaptivecomputing.com/resources/docs/torque/3-0-3/changelog.php#259 · Note