CVE-2013-4319
pbs_mom in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.5.x,...
pbs_mom in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.5.x, 4.x, and earlier does not properly restrict access by unprivileged ports, which allows remote authenticated users to execute arbitrary jobs by submitting a command.
Exploit likelihood
What each source reports
NVD Score used
pbs_mom in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.5.x, 4.x, and earlier does not properly restrict access by unprivileged ports, which allows remote authenticated users to execute arbitrary jobs by submitting a command.
- Record
CVE-2013-4319- CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
pbs_mom in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.5.x, 4.x, and earlier does not properly restrict access by unprivileged ports, which allows remote authenticated users to execute arbitrary jobs by submitting a command.
- Record
CVE-2013-4319- Updated
- 2026-11-02
EUVDEUVD-2013-4208 No score
pbs_mom in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.5.x, 4.x, and earlier does not properly restrict access by unprivileged ports, which allows remote authenticated users to execute arbitrary jobs by submitting a command.
- Record
EUVD-2013-4208- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h32j-52qf-p7w4 No score
pbs_mom in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.5.x,...
pbs_mom in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.5.x, 4.x, and earlier does not properly restrict access by unprivileged ports, which allows remote authenticated users to execute arbitrary jobs by submitting a command.
- Record
GHSA-h32j-52qf-p7w4- Updated
- 2026-11-02
OSVMGASA-2013-0308 No score
Updated torque packages fix CVE-2013-4319
Updated torque package fixes security vulnerability:
A non-priviledged user who was able to run jobs or login to a node which ran pbs_server or pbs_mom, could submit arbitrary jobs to a pbs_mom daemon to queue and run the job, which would run as root (CVE-2013-4319).
- Record
MGASA-2013-0308- Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-4319 No score
pbs_mom in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.5.x, 4.x, and earlier does not properly restrict access by unprivileged ports, which allows remote authenticated users to execute arbitrary jobs by submitting a command.
- Record
UBUNTU-CVE-2013-4319- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
torqueDebian:6.0 |
before 2.4.8+dfsg-9squeeze2, plus listed versions 2.4.8+dfsg-92.4.8+dfsg-9squeeze1 |
2.4.8+dfsg-9squeeze2 |
torqueDebian:7 |
before 2.4.16+dfsg-1+deb7u1, plus listed versions 2.4.16+dfsg-1 |
2.4.16+dfsg-1+deb7u1 |
torqueMageia:2 |
before 2.5.12-1.1.mga2 | 2.5.12-1.1.mga2 |
torqueMageia:3 |
before 4.1.5.1-1.1.mga3 | 4.1.5.1-1.1.mga3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-4319 is a high vulnerability (CVSS 9.0) in Adaptivecomputing Torque Resource Manager, published October 9, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.92%, the 87th percentile. Fixed in torque 2.4.8+dfsg-9squeeze2.