CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 8.5
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: multiple buffer overflows in terascale open-source resource and queue manager (aka torque resource manager) 2.x before 2.4.14, 2.5.x before 2.5.6, and 3.x before 3.0.2 allow (1) remote authenticated users to gain privileges via a long job_name field in a qsub command to the server, and might allow (2) local users to gain privileges via vectors involving a long host variable in pbs_iff.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2011-06-24
Last Modified Date: 2018-10-09