CVE-2013-4495

critical
Published 2013-11-20 · Modified 2026-04-29
CVSS v3
CVSS v2
10.0
VIR risk
10.0

Description

The send_the_mail function in server/svr_mail.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 4.2.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the email (-M switch) to qsub.

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://secunia.com/advisories/55622

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://secunia.com/advisories/55535

Application impact

VendorProductVersionsFixed
adaptivecomputingtorque_resource_manager{"endIncluding":"4.2.5"}
adaptivecomputingtorque_resource_manager2.0.0
adaptivecomputingtorque_resource_manager2.1.2
adaptivecomputingtorque_resource_manager2.1.3
adaptivecomputingtorque_resource_manager2.1.6
adaptivecomputingtorque_resource_manager2.1.7
adaptivecomputingtorque_resource_manager2.1.8
adaptivecomputingtorque_resource_manager2.1.9
adaptivecomputingtorque_resource_manager2.1.10
adaptivecomputingtorque_resource_manager2.1.11
adaptivecomputingtorque_resource_manager2.2.0
adaptivecomputingtorque_resource_manager2.2.1
adaptivecomputingtorque_resource_manager2.3.0
adaptivecomputingtorque_resource_manager2.3.1
adaptivecomputingtorque_resource_manager2.3.2
adaptivecomputingtorque_resource_manager2.3.3
adaptivecomputingtorque_resource_manager2.3.4
adaptivecomputingtorque_resource_manager2.3.5
adaptivecomputingtorque_resource_manager2.3.6
adaptivecomputingtorque_resource_manager2.3.7
adaptivecomputingtorque_resource_manager2.3.8
adaptivecomputingtorque_resource_manager2.3.9
adaptivecomputingtorque_resource_manager2.3.10
adaptivecomputingtorque_resource_manager2.3.11
adaptivecomputingtorque_resource_manager2.3.12
adaptivecomputingtorque_resource_manager2.3.13
adaptivecomputingtorque_resource_manager2.4.2
adaptivecomputingtorque_resource_manager2.4.3
adaptivecomputingtorque_resource_manager2.4.4
adaptivecomputingtorque_resource_manager2.4.5
adaptivecomputingtorque_resource_manager2.4.6
adaptivecomputingtorque_resource_manager2.4.7
adaptivecomputingtorque_resource_manager2.4.8
adaptivecomputingtorque_resource_manager2.4.9
adaptivecomputingtorque_resource_manager2.4.10
adaptivecomputingtorque_resource_manager2.4.11
adaptivecomputingtorque_resource_manager2.4.12
adaptivecomputingtorque_resource_manager2.4.13
adaptivecomputingtorque_resource_manager2.4.14
adaptivecomputingtorque_resource_manager2.4.15
adaptivecomputingtorque_resource_manager2.4.16
adaptivecomputingtorque_resource_manager2.4.17
adaptivecomputingtorque_resource_manager2.5.0
adaptivecomputingtorque_resource_manager2.5.1
adaptivecomputingtorque_resource_manager2.5.2
adaptivecomputingtorque_resource_manager2.5.3
adaptivecomputingtorque_resource_manager2.5.4
adaptivecomputingtorque_resource_manager2.5.5
adaptivecomputingtorque_resource_manager2.5.6
adaptivecomputingtorque_resource_manager2.5.7
adaptivecomputingtorque_resource_manager2.5.8
adaptivecomputingtorque_resource_manager2.5.9
adaptivecomputingtorque_resource_manager2.5.10
adaptivecomputingtorque_resource_manager2.5.11
adaptivecomputingtorque_resource_manager2.5.12
adaptivecomputingtorque_resource_manager2.5.13
adaptivecomputingtorque_resource_manager3.0.0
adaptivecomputingtorque_resource_manager3.0.1
adaptivecomputingtorque_resource_manager3.0.2
adaptivecomputingtorque_resource_manager3.0.3
adaptivecomputingtorque_resource_manager3.0.4
adaptivecomputingtorque_resource_manager3.0.5
adaptivecomputingtorque_resource_manager3.0.6
adaptivecomputingtorque_resource_manager4.0.0
adaptivecomputingtorque_resource_manager4.0.2
adaptivecomputingtorque_resource_manager4.1.0
adaptivecomputingtorque_resource_manager4.1.1
adaptivecomputingtorque_resource_manager4.1.2
adaptivecomputingtorque_resource_manager4.1.3
adaptivecomputingtorque_resource_manager4.1.5.1
adaptivecomputingtorque_resource_manager4.1.6
adaptivecomputingtorque_resource_manager4.1.7
adaptivecomputingtorque_resource_manager4.2.2
adaptivecomputingtorque_resource_manager4.2.3
adaptivecomputingtorque_resource_manager4.2.3.1
adaptivecomputingtorque_resource_manager4.2.4.1

References

CWEs

CWE-94

Verify integrity in audit chain (admin only). AS-IS.