PT-2012-4758 · Htcondor · Condor

Florian Weimer · Publicado 2012-09-28 · Atualizado 2012-10-03 · CVE-2012-3493

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Condor versions 7.6.x through 7.6.9 Condor versions 7.8.x through 7.8.3

Description The issue allows remote attackers to obtain sensitive information and possibly control or start arbitrary jobs via a ClassAd request to the condor startd port. This is due to a leak of the ClaimId in the command give request ad function.

Recommendations For Condor versions 7.6.x through 7.6.9, update to version 7.6.10 or later. For Condor versions 7.8.x through 7.8.3, update to version 7.8.4 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2012-3493

RHSA-2012:1278

RHSA-2012:1281

Produtos afetados

Condor

Referências · 13

• http://condor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdiff%3Bh=d2f33972 · Nota
• http://securityfocus.com/bid/55632 · Nota
• http://research.cs.wisc.edu/condor/manual/v7.6/8_3Stable_Release.html · Nota
• http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html · Nota
• http://rhn.redhat.com/errata/RHSA-2012-1281.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2012/09/20/9 · Nota
• http://secunia.com/advisories/50666 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2012-1278.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2012-3493 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-3493 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2012-3493 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-3493 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=848222 · Nota