medium4.9
CVE-2011-4925
Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 2.5.9, when munge authentication is used, allows remote authenticated use…
Impact
Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 2.5.9, when munge authentication is used, allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cluster Resources | Torque Resource Manager | Versions 1.0.1p0, 1.0.1p1, 1.0.1p2, 1.0.1p3, 1.0.1p4, 1.0.1p5 |
| Clusterresources | Torque Resource Manager | through 2.5.8 Versions 2.1.0p0, 2.1.1, 2.1.2, 2.2.0, 2.3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://openwall.com/lists/oss-security/2012/01/05/1
- http://openwall.com/lists/oss-security/2012/01/05/9
- http://secunia.com/advisories/47381
- http://www.adaptivecomputing.com/resources/docs/torque/3-0-3/changelog.php#259
- http://www.securityfocus.com/bid/51224
- http://openwall.com/lists/oss-security/2012/01/05/1
- http://openwall.com/lists/oss-security/2012/01/05/9
- http://secunia.com/advisories/47381
- http://www.adaptivecomputing.com/resources/docs/torque/3-0-3/changelog.php#259
- http://www.securityfocus.com/bid/51224