PT-2013-1675 · Red Hat · Condor

Daniel Horák

·

Publicado

2013-03-12

·

Atualizado

2023-02-13

·

CVE-2012-4462

CVSS v2.0

4.3

Média

VetorAV:N/AC:M/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Condor versions in Red Hat Enterprise MRG 2.3
Description The issue allows remote attackers to cause a denial of service, resulting in a condor schedd restart, by utilizing square brackets in the cproc option when removing a job. This is due to a flaw in the avairy/jobcontrol.py script.
Recommendations For Condor versions in Red Hat Enterprise MRG 2.3, consider restricting the use of square brackets in the cproc option as a temporary workaround until a patch is available. Avoid using the cproc option with square brackets in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2012-4462
RHSA-2013:0564
RHSA-2013:0565

Produtos afetados

Condor