NVD

Id
31835  
Name
CVE-2014-3684  
Description
The tm_adopt function in lib/Libifl/tm.c in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 5.0.x, 4.5.x, 4.2.x, and earlier does not validate that the owner of the process also owns the adopted session id, which allows remote authenticated users to kill arbitrary processes via a crafted executable.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2014-10-30  
Modified Date
2016-12-30  
Seq
2014-3684  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
167833 31835 CVE-2014-3684 http://advisories.mageia.org/MGASA-2014-0408.html  View
167834 31835 CVE-2014-3684 FEDORA-2015-8571  View
167835 31835 CVE-2014-3684 FEDORA-2015-8544  View
167836 31835 CVE-2014-3684 FEDORA-2015-8577  View
167837 31835 CVE-2014-3684 [oss-security] 20141002 tm_adopt() vulnerability in TORQUE Resource Manager  View
167838 31835 CVE-2014-3684 [oss-security] 20141003 Re: tm_adopt() vulnerability in TORQUE Resource Manager  View
167839 31835 CVE-2014-3684 DSA-3058  View
167840 31835 CVE-2014-3684 MDVSA-2015:124  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16284 JVNDB-2014-005159 Terascale Open-Source Resource and Queue Manager の lib/Libifl/tm.c における任意のプロセスを強制終了される脆弱性 Terascale Open-Source Resource and Queue Manager (別名 TORQUE Resource Manager) の lib/Libifl/tm.c の tm_adopt 関数は、プロセスの所有者も採用されたセッション ID を所有していることを検証しないため、任意のプロセスを強制終了 (kill) される脆弱性が存在します。 CVE-2014-3684 70972 CVE-2014-3684 31835 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005159.html 2014-10-02 2014-11-04 View