Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

condor project condor 7.8.0 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2012-5390
The standard universe shadow (condor_shadow.std) component in Condor 7.7.3 up to and including 7.7.6, 7.8.0 prior to 7.8.5, and 7.9.0 does no properly check privileges, which allows remote malicious users to gain privileges via a crafted standard universe job.
Condor Project Condor 7.9.0Condor Project Condor 7.8.0Condor Project Condor 7.8.2Condor Project Condor 7.8.4Condor Project Condor 7.8.1Condor Project Condor 7.8.3Condor Project Condor 7.7.3Condor Project Condor 7.7.4Condor Project Condor 7.7.5Condor Project Condor 7.7.6
4
CVSSv2
CVE-2012-3491
src/condor_schedd.V6/schedd.cpp in Condor 7.6.x prior to 7.6.10 and 7.8.x prior to 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle jobs via unspecified vectors.
Condor Project Condor 7.6.1Condor Project Condor 7.6.3Condor Project Condor 7.6.9Condor Project Condor 7.6.0Condor Project Condor 7.6.5Condor Project Condor 7.6.6Condor Project Condor 7.8.3Condor Project Condor 7.8.1Condor Project Condor 7.6.4Condor Project Condor 7.8.0Condor Project Condor 7.6.7Condor Project Condor 7.6.2Condor Project Condor 7.6.8Condor Project Condor 7.8.2
5.8
CVSSv2
CVE-2012-3493
The command_give_request_ad function in condor_startd.V6/command.cpp Condor 7.6.x prior to 7.6.10 and 7.8.x prior to 7.8.4 allows remote malicious users to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the condor_startd port,...
Condor Project Condor 7.6.1Condor Project Condor 7.6.3Condor Project Condor 7.6.9Condor Project Condor 7.6.0Condor Project Condor 7.6.5Condor Project Condor 7.6.6Condor Project Condor 7.8.3Condor Project Condor 7.8.1Condor Project Condor 7.6.4Condor Project Condor 7.8.0Condor Project Condor 7.6.7Condor Project Condor 7.6.2Condor Project Condor 7.6.8Condor Project Condor 7.8.2
10
CVSSv2
CVE-2012-5197
Multiple unspecified vulnerabilities in Condor 7.6.x prior to 7.6.10 and 7.8.x prior to 7.8.4 have unknown impact and attack vectors related to "error checking of system calls."
Condor Project Condor 7.6.2Condor Project Condor 7.6.5Condor Project Condor 7.6.1Condor Project Condor 7.6.6Condor Project Condor 7.6.8Condor Project Condor 7.6.0Condor Project Condor 7.6.3Condor Project Condor 7.6.9Condor Project Condor 7.6.4Condor Project Condor 7.6.7Condor Project Condor 7.8.1Condor Project Condor 7.8.3Condor Project Condor 7.8.2Condor Project Condor 7.8.0
6.4
CVSSv2
CVE-2012-3492
The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x prior to 7.6.10 and 7.8.x prior to 7.8.4 uses authentication directories even when they have weak permissions, which allows remote malicious users to impersonate users by renaming a user's authentic...
Condor Project Condor 7.6.1Condor Project Condor 7.6.3Condor Project Condor 7.6.9Condor Project Condor 7.6.0Condor Project Condor 7.6.5Condor Project Condor 7.6.6Condor Project Condor 7.8.3Condor Project Condor 7.8.1Condor Project Condor 7.6.4Condor Project Condor 7.8.0Condor Project Condor 7.6.7Condor Project Condor 7.6.2Condor Project Condor 7.6.8Condor Project Condor 7.8.2
10
CVSSv2
CVE-2012-5196
Multiple buffer overflows in Condor 7.6.x prior to 7.6.10 and 7.8.x prior to 7.8.4 have unknown impact and attack vectors.
Condor Project Condor 7.6.1Condor Project Condor 7.6.0Condor Project Condor 7.8.3Condor Project Condor 7.6.9Condor Project Condor 7.8.1Condor Project Condor 7.6.5Condor Project Condor 7.6.4Condor Project Condor 7.6.7Condor Project Condor 7.8.2Condor Project Condor 7.8.0Condor Project Condor 7.6.6Condor Project Condor 7.6.8Condor Project Condor 7.6.3Condor Project Condor 7.6.2
4.3
CVSSv2
CVE-2012-4462
aviary/jobcontrol.py in Condor, as used in Red Hat Enterprise MRG 2.3, when removing a job, allows remote malicious users to cause a denial of service (condor_schedd restart) via square brackets in the cproc option.
Condor Project Condor 7.8.0Redhat Enterprise Mrg 2.3
10
CVSSv2
CVE-2012-3416
Condor prior to 7.8.2 allows remote malicious users to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.
Condor Project Condor 7.1.4Condor Project Condor 6.8.1Condor Project Condor 7.2.3Condor Project CondorCondor Project Condor 7.1.3Condor Project Condor 6.8.4Condor Project Condor 7.1.0Condor Project Condor 7.1.1Condor Project Condor 7.0.0Condor Project Condor 7.3.2Condor Project Condor 7.02Condor Project Condor 7.01Condor Project Condor 7.2.1Condor Project Condor 7.2.0Condor Project Condor 7.4.1Condor Project Condor 7.3.0Condor Project Condor 6.8.9Condor Project Condor 6.8.0Condor Project Condor 7.0.6Condor Project Condor 6.8.6Condor Project Condor 7.00Condor Project Condor 6.8.7
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook