CVE:CVE-2011-4925
CNNVD:CNNVD-201201-157
Terascale Open-Source资源和队列管理器（又名TORQUE资源管理器）2.5.9之前版本中存在漏洞。当mugue认证被使用时，远程认证用户可利用该漏洞借助未明向量模拟任意用户的账户登录。
solution:Upgrade cluster_resources torque_resource_manager to a higher version than 1.0.1p0,1.0.1p1,1.0.1p2,1.0.1p3,1.0.1p4,1.0.1p5,1.0.1p6,1.1.0p0,1.1.0p1,1.1.0p2,1.1.0p3,1.1.0p4,1.1.0p5,1.1.0p6,1.2.0p0,1.2.0p1,1.2.0p2,1.2.0p3,1.2.0p4,1.2.0p5,1.2.0p6,2.0.0p0,2.0.0p1,2.0.0p2,2.0.0p3,2.0.0p4,2.0.0p5,2.0.0p6,and avoid the version 1.0.1p0,1.0.1p1,1.0.1p2,1.0.1p3,1.0.1p4,1.0.1p5,1.0.1p6,1.1.0p0,1.1.0p1,1.1.0p2,1.1.0p3,1.1.0p4,1.1.0p5,1.1.0p6,1.2.0p0,1.2.0p1,1.2.0p2,1.2.0p3,1.2.0p4,1.2.0p5,1.2.0p6,2.0.0p0,2.0.0p1,2.0.0p2,2.0.0p3,2.0.0p4,2.0.0p5,2.0.0p6; Upgrade clusterresources torque_resource_manager to a higher version than 2.5.8,2.1.0p0,2.1.1,2.1.2,2.2.0,2.3.0,2.3.1,2.3.2,2.3.3,2.3.4,2.3.5,2.3.6,2.3.7,2.3.8,2.3.9,2.3.10,2.3.11,2.3.12,2.4.0,2.4.1,2.4.2,2.4.3,2.4.4,2.4.5,2.4.6,2.4.7,2.4.8,2.4.9,2.4.10,2.4.11,2.4.12,2.5.0,2.5.1,2.5.2,2.5.3,2.5.4,2.5.5,2.5.6,2.5.7,and avoid the version (,2.5.8],2.1.0p0,2.1.1,2.1.2,2.2.0,2.3.0,2.3.1,2.3.2,2.3.3,2.3.4,2.3.5,2.3.6,2.3.7,2.3.8,2.3.9,2.3.10,2.3.11,2.3.12,2.4.0,2.4.1,2.4.2,2.4.3,2.4.4,2.4.5,2.4.6,2.4.7,2.4.8,2.4.9,2.4.10,2.4.11,2.4.12,2.5.0,2.5.1,2.5.2,2.5.3,2.5.4,2.5.5,2.5.6,2.5.7