Test ID:	1.3.6.1.4.1.25623.1.0.69931
Category:	Fedora Local Security Checks
Title:	Fedora Core 15 FEDORA-2011-8072 (torque)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to torque announced via advisory FEDORA-2011-8072. Update Information: This update fixes a buffer overflow that could allow for remote arbitrary code execution by a torque service. Credit to Bartlomiej Balcerek - CVE-2011-2193. Warning: Packages previous to torque-3.0.1-4.fc15 within Fedora 15 contained the empty file /var/lib/torque/server_priv/nodes . This file is a listing of the nodes within your torque cluster and as such it should survive intact with upgrades. This file has now been removed from the package with torque-3.0.1-4.fc15 but it is essential that you backup and restore this file before and then after installing torque-3.0.1-4.fc15. References: [ 1 ] Bug #711463 - CVE-2011-2193 Torque Server Buffer Overflow Vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=711463 [ 2 ] Bug #713996 - pbs_server crashes whenever anything connects https://bugzilla.redhat.com/show_bug.cgi?id=713996 [ 3 ] Bug #716659 - Torque updates Overwrite nodes file https://bugzilla.redhat.com/show_bug.cgi?id=716659 Solution: Apply the appropriate updates. This update can be installed with the yum update program. Use su -c 'yum update torque' at the command line. For more information, refer to Managing Software with yum, available at http://docs.fedoraproject.org/yum/. http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2011-8072 Risk factor : Critical CVSS Score: 8.5
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2193 BugTraq ID: 48374 http://www.securityfocus.com/bid/48374 Bugtraq: 20110713 Torque Server Buffer Overflow Vulnerability (Google Search) http://www.securityfocus.com/archive/1/518885/100/0/threaded Debian Security Information: DSA-2329 (Google Search) http://www.debian.org/security/2011/dsa-2329 http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062638.html http://lists.fedoraproject.org/pipermail/package-announce/2011-June/061645.html http://secunia.com/advisories/45039 http://secunia.com/advisories/45040 http://securityreason.com/securityalert/8304 XForce ISS Database: torque-hostnames-bo(68152) https://exchange.xforce.ibmcloud.com/vulnerabilities/68152 XForce ISS Database: torque-jobnames-bo(68151) https://exchange.xforce.ibmcloud.com/vulnerabilities/68151
Copyright	Copyright (c) 2011 E-Soft Inc. http://www.securityspace.com

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.