PT-2012-4757 · Htcondor · Condor

Florian Weimer · Publicado 2012-09-28 · Atualizado 2012-10-03 · CVE-2012-3492

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Condor versions 7.6.x through 7.6.9 Condor versions 7.8.x through 7.8.3

Description The issue concerns the filesystem authentication in Condor, where authentication directories with weak permissions are used. This allows remote attackers to impersonate users by renaming a user's authentication directory.

Recommendations For Condor versions 7.6.x through 7.6.9, update to version 7.6.10 or later. For Condor versions 7.8.x through 7.8.3, update to version 7.8.4 or later.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2012-3492

RHSA-2012:1278

RHSA-2012:1281

Produtos afetados

Condor

Referências · 14

• 🔥 http://condor-git.cs.wisc.edu/?p=condor.git;a=commitdiff;h=1db67805 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-3492 · Nota de Segurança
• http://condor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdiff%3Bh=1db67805 · Nota
• https://osv.dev/vulnerability/CVE-2012-3492 · Aviso do Fabricante
• http://securityfocus.com/bid/55632 · Nota
• http://research.cs.wisc.edu/condor/manual/v7.6/8_3Stable_Release.html · Nota
• http://rhn.redhat.com/errata/RHSA-2012-1281.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-3492 · Nota
• http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html · Nota
• http://openwall.com/lists/oss-security/2012/09/20/9 · Nota
• https://security-tracker.debian.org/tracker/CVE-2012-3492 · Aviso do Fabricante
• http://secunia.com/advisories/50666 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2012-1278.html · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-3492 · Aviso do Fabricante