Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.1.10.2014.0408
Categoría:Mageia Linux Local Security Checks
Título:Mageia: Security Advisory (MGASA-2014-0408)
Resumen:The remote host is missing an update for the 'torque' package(s) announced via the MGASA-2014-0408 advisory.
Descripción:Summary:
The remote host is missing an update for the 'torque' package(s) announced via the MGASA-2014-0408 advisory.

Vulnerability Insight:
Updated torque packages fix security vulnerabilities:

Chad Vizino reported that within a TORQUE Resource Manager job a non-root
user could use a vulnerability in the tm_adopt() library call to kill
processes
he/she doesn't own including root-owned ones on any node in a job
(CVE-2014-3684).

This update implements the upstream fixes.

Affected Software/OS:
'torque' package(s) on Mageia 3, Mageia 4.

Solution:
Please install the updated package(s).

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:L/Au:S/C:N/I:N/A:C

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2014-3684
61350
http://secunia.com/advisories/61350
61960
http://secunia.com/advisories/61960
DSA-3058
http://www.debian.org/security/2014/dsa-3058
FEDORA-2015-8544
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159201.html
FEDORA-2015-8571
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159183.html
FEDORA-2015-8577
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/159259.html
MDVSA-2015:124
http://www.mandriva.com/security/advisories?name=MDVSA-2015:124
[oss-security] 20141002 tm_adopt() vulnerability in TORQUE Resource Manager
http://openwall.com/lists/oss-security/2014/10/02/44
[oss-security] 20141003 Re: tm_adopt() vulnerability in TORQUE Resource Manager
http://openwall.com/lists/oss-security/2014/10/02/45
http://advisories.mageia.org/MGASA-2014-0408.html
CopyrightCopyright (C) 2022 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.