Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Debian DSA-2329-1 Moderate: Torque Server Buffer Overflow Exploit

debian
Calendar Grey October 27, 2011
Scroller Debian
Multiple stack overflows present in the torque daemon enable adversaries to destabilize it or run unauthorized commands through specially designed identifiers.
Bartlomiej Balcerek discovered several buffer overflows in torque server, a PBS-derived batch processing server
Topics%20covered

Topics Covered

security advisory buffer overflow remote exploit debian torque server

Summary

Bartlomiej Balcerek discovered several buffer overflows in torque server,
a PBS-derived batch processing server. This allows an attacker to crash the
service or execute arbitrary code with privileges of the server via crafted
job or host names.

The oldstable distribution (lenny) does not contain torque.

For the stable distribution (squeeze), this problem has been fixed in
version 2.4.8+dfsg-9squeeze1.

For the testing distribution (wheezy), this problem has been fixed in
version 2.4.15+dfsg-1.

For the unstable distribution (sid), this problem has been fixed in
version 2.4.15+dfsg-1.

We recommend that you upgrade your torque packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/



Package: torque

Topics%20covered

Topics Covered

security advisory buffer overflow remote exploit debian torque server

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.