pbs_mom in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.5.x, 4.x, and earlier does not properly restrict access by unprivileged ports, which allows remote authenticated users to execute arbitrary jobs by submitting a command.

The remote host is affected by the vulnerability described in GLSA-201412-47 (TORQUE Resource Manager: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in TORQUE Resource       Manager. Please review the CVE identifiers referenced below for details.
  Impact :

    A context-dependent attacker may be able to gain escalated privileges,       execute arbitrary code, or bypass security restrictions.
  Workaround :

    There is no known workaround at this time.

Fix CVE-2013-4319 (RHBZ #1005918, #1005919)

Fix CVE-2013-4495: arbitrary code execution via job submission (RHBZ #1029752) Fix CVE-2013-4495: arbitrary code execution via job submission (RHBZ #1029752)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated torque package fixes security vulnerability :

A non-priviledged user who was able to run jobs or login to a node which ran pbs_server or pbs_mom, could submit arbitrary jobs to a pbs_mom daemon to queue and run the job, which would run as root (CVE-2013-4319).

John Fitzpatrick of MWR InfoSecurity discovered an authentication bypass vulnerability in torque, a PBS-derived batch processing queueing system.

The torque authentication model revolves around the use of privileged ports. If a request is not made from a privileged port then it is assumed not to be trusted or authenticated. It was found that pbs_mom does not perform a check to ensure that connections are established from a privileged port.

A user who can run jobs or login to a node running pbs_server or pbs_mom can exploit this vulnerability to remotely execute code as root on the cluster by submitting a command directly to a pbs_mom daemon to queue and run a job.

ID	Name	Product	Family	Severity
80268	GLSA-201412-47 : TORQUE Resource Manager: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
78566	Fedora 19 : torque-3.0.4-5.fc19 (2014-12059)	Nessus	Fedora Local Security Checks	high
78565	Fedora 20 : torque-3.0.4-6.fc20 (2014-11989)	Nessus	Fedora Local Security Checks	high
70519	Mandriva Linux Security Advisory : torque (MDVSA-2013:252)	Nessus	Mandriva Local Security Checks	high
70354	Debian DSA-2770-1 : torque - authentication bypass	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2013-4319

critical

Tenable Plugins

critical

high

high

high

high