PT-2012-4757 · Htcondor · Condor

Florian Weimer · Published 2012-09-28 · Updated 2012-10-03 · CVE-2012-3492

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Condor versions 7.6.x through 7.6.9 Condor versions 7.8.x through 7.8.3

Description The issue concerns the filesystem authentication in Condor, where authentication directories with weak permissions are used. This allows remote attackers to impersonate users by renaming a user's authentication directory.

Recommendations For Condor versions 7.6.x through 7.6.9, update to version 7.6.10 or later. For Condor versions 7.8.x through 7.8.3, update to version 7.8.4 or later.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2012-3492

RHSA-2012:1278

RHSA-2012:1281

Affected Products

Condor

References · 14

• 🔥 http://condor-git.cs.wisc.edu/?p=condor.git;a=commitdiff;h=1db67805 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-3492 · Security Note
• https://osv.dev/vulnerability/CVE-2012-3492 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1281.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-3492 · Vendor Advisory
• http://secunia.com/advisories/50666 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1278.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-3492 · Vendor Advisory
• http://condor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdiff%3Bh=1db67805 · Note
• http://securityfocus.com/bid/55632 · Note
• http://research.cs.wisc.edu/condor/manual/v7.6/8_3Stable_Release.html · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-3492 · Note
• http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html · Note
• http://openwall.com/lists/oss-security/2012/09/20/9 · Note