CVE-2012-3492

The filesystem authentication condorio/condorauthfs.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication directories even when they have weak permissions, which allows remote attackers to impersonate users by renaming a user's authentication directory...

CVE-2012-5196

The CVE-2012-5196 entry concerns multiple buffer overflows in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4. The connected documents provide versions and the described issue but do not include concrete impact specifics or attack vectors beyond stating they are unknown. No exploit details or m...

CVE-2012-3491

src/condorschedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle jobs via unspecified vectors...

CVE-2012-5197

Multiple unspecified vulnerabilities in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors related to "error checking of system calls."...

CVE-2012-3492

The filesystem authentication condorio/condorauthfs.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication directories even when they have weak permissions, which allows remote attackers to impersonate users by renaming a user's authentication directory...

CVE-2012-3493

The commandgiverequestad function in condorstartd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the condorstartd port, which leaks the ClaimId...

CVE-2012-5196

Multiple buffer overflows in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors...

CVE-2012-5197: Undefined Security Weakness

Multiple unspecified vulnerabilities in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors related to "error checking of system calls."...

CVE-2012-3491: Undefined Security Weakness

src/condorschedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle jobs via unspecified vectors...

CVE-2012-3492: Improper Authentication

The filesystem authentication condorio/condorauthfs.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication directories even when they have weak permissions, which allows remote attackers to impersonate users by renaming a user's authentication directory...

CVE-2012-3493: Exposure of Sensitive Information to an Unauthorized Actor

The commandgiverequestad function in condorstartd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the condorstartd port, which leaks the ClaimId...

PT-2012-4757

Name of the Vulnerable Software and Affected Versions Condor versions 7.6.x through 7.6.9 Condor versions 7.8.x through 7.8.3 Description The issue concerns the filesystem authentication in Condor, where authentication directories with weak permissions are used. This allows remote attackers to...

PT-2012-5833

Name of the Vulnerable Software and Affected Versions Condor versions 7.6.x through 7.6.9 Condor versions 7.8.x through 7.8.3 Description Multiple buffer overflows have been identified with unknown impact and attack vectors. Recommendations For Condor versions 7.6.x through 7.6.9, update to versi...

PT-2012-4756

Name of the Vulnerable Software and Affected Versions Condor versions 7.6.x through 7.6.9 Condor versions 7.8.x through 7.8.3 Description The issue is related to improper permission checking of jobs, allowing remote authenticated users to remove arbitrary idle jobs. Recommendations For Condor...

PT-2012-5834

Name of the Vulnerable Software and Affected Versions Condor versions 7.6.x through 7.6.9 Condor versions 7.8.x through 7.8.3 Description The issue is related to error checking of system calls, but details about its general impact and attack vectors are not specified. There is no information...

PT-2012-4758

Name of the Vulnerable Software and Affected Versions Condor versions 7.6.x through 7.6.9 Condor versions 7.8.x through 7.8.3 Description The issue allows remote attackers to obtain sensitive information and possibly control or start arbitrary jobs via a ClassAd request to the condor startd port...

CVE-2012-5196: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors...

PT-2012-4732

Name of the Vulnerable Software and Affected Versions Cumin before version 0.1.5444 Description The issue allows remote authenticated users to modify Condor attributes and possibly gain privileges via crafted additional parameters in an HTTP POST request. This triggers a job attribute change...

condor: lock directories created mode 0777 allow for FS-based authentication challenge bypass

The filesystem authentication condorio/condorauthfs.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication directories even when they have weak permissions, which allows remote attackers to impersonate users by renaming a user's authentication directory...

condor: GIVE_REQUEST_AD leaks privileged ClaimId information

The commandgiverequestad function in condorstartd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the condorstartd port, which leaks the ClaimId...