Описание
The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email (-M switch) to qsub.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 2.4.16+dfsg-1.3ubuntu1 |
| esm-infra-legacy/trusty | not-affected | 2.4.16+dfsg-1.3ubuntu1 |
| lucid | ignored | end of life |
| precise | released | 2.4.16+dfsg-1+deb7u4build0.12.04.1 |
| quantal | ignored | end of life |
| raring | ignored | end of life |
| saucy | ignored | end of life |
| trusty | not-affected | 2.4.16+dfsg-1.3ubuntu1 |
| trusty/esm | not-affected | 2.4.16+dfsg-1.3ubuntu1 |
| upstream | released | 2.4.8+dfsg-9squeeze3, 2.4.16+dfsg-1+deb7u2, 2.4.16+dfsg-1.3 |
Показывать по
EPSS
10 Critical
CVSS2
Связанные уязвимости
The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email (-M switch) to qsub.
The send_the_mail function in server/svr_mail.c in Terascale Open-Sour ...
The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email (-M switch) to qsub.
EPSS
10 Critical
CVSS2