PT-2013-4920

Name of the Vulnerable Software and Affected Versions Condor versions 7.5.4 and earlier, 8.0.0 Description The policy definition evaluator does not properly handle attributes in certain policies that evaluate to an Unconfigured, Undefined, or Error state. This allows remote authenticated users to...

PT-2013-1376

Name of the Vulnerable Software and Affected Versions Condor versions prior to 7.4.2 Description The policy definition evaluator does not properly handle attributes in a WANT SUSPEND policy that evaluate to an UNDEFINED state. This allows remote authenticated users to cause a denial of service...

DEBIAN-CVE-2012-3493

The commandgiverequestad function in condorstartd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the condorstartd port, which leaks the ClaimId...

condor: GIVE_REQUEST_AD leaks privileged ClaimId information

The commandgiverequestad function in condorstartd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the condorstartd port, which leaks the ClaimId...