The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email (-M switch) to qsub.
                
            References
                    Configurations
                    Configuration 1 (hide)
            
            
  | 
    
History
                    No history.
Information
                Published : 2013-11-20 14:12
Updated : 2016-12-08 03:03
NVD link : CVE-2013-4495
Mitre link : CVE-2013-4495
CVE.ORG link : CVE-2013-4495
JSON object : View
Products Affected
                adaptivecomputing
- torque_resource_manager
 
CWE
                
                    
                        
                        CWE-94
                        
            Improper Control of Generation of Code ('Code Injection')
