CVE-2008-3830

CVE-2008-3830 affects Condor up to 7.0.4-7.x; the issue arises when configuration specifies overlapping netmasks in allow/deny rules, causing a rule to be ignored and enabling bypass of access restrictions. Public sources (NVD) describe the vulnerability; Fedora 9 and Red Hat advisories reference...

CVE-2008-3828

Stack-based buffer overflow in the condor schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors...

CVE-2008-3826

Unspecified vulnerability in Condor before 7.0.5 allows attackers to execute jobs as other users via unknown vectors...

CVE-2008-3826: Undefined Security Weakness

Unspecified vulnerability in Condor before 7.0.5 allows attackers to execute jobs as other users via unknown vectors...

CVE-2008-3828: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the condor schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors...

CVE-2008-3829: Undefined Security Weakness

Unspecified vulnerability in the condor schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of service crash via unknown vectors...

CVE-2008-3830: Undefined Security Weakness

Condor before 7.0.5 does not properly handle when the configuration specifies overlapping netmasks in allow or deny rules, which causes the rule to be ignored and allows attackers to bypass intended access restrictions...

condor: users can run jobs with arbitrary owners

Unspecified vulnerability in Condor before 7.0.5 allows attackers to execute jobs as other users via unknown vectors...

condor: buffer overflow in lookup_macro

Stack-based buffer overflow in the condor schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors...

condor: denial of service attack on Schedd via corrupt logfile

Unspecified vulnerability in the condor schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of service crash via unknown vectors...

condor: buffer overflow in lookup_macro

Stack-based buffer overflow in the condor schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors...

condor: allow or deny with overlapping netmasks may be ignored

Condor before 7.0.5 does not properly handle when the configuration specifies overlapping netmasks in allow or deny rules, which causes the rule to be ignored and allows attackers to bypass intended access restrictions...

condor: allow or deny with overlapping netmasks may be ignored

Condor before 7.0.5 does not properly handle when the configuration specifies overlapping netmasks in allow or deny rules, which causes the rule to be ignored and allows attackers to bypass intended access restrictions...

Moderate: Red Hat Security Advisory: condor security, bug fix and enhancement update

Updated condor packages that address multiple security issues, fix several bugs, and introduce feature enhancements are now available for Red Hat Enterprise MRG 1.0 for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team...

condor: users can run jobs with arbitrary owners

Unspecified vulnerability in Condor before 7.0.5 allows attackers to execute jobs as other users via unknown vectors...

condor: denial of service attack on Schedd via corrupt logfile

Unspecified vulnerability in the condor schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of service crash via unknown vectors...

Moderate: Red Hat Security Advisory: condor security, bug fix and enhancement update

Updated condor packages that fix multiple security issues, several bugs and introduce feature enhancements are now available for Red Hat Enterprise MRG 1.0 for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Condor i...

Fedora 9 : condor-7.0.4-1.fc9 (2008-7205)

A flaw was found in a way condor interpreted wild cards in the authorization lists. Certain authorization lists using wild cards in DENY rules such as DENYWRITE or HOSTDENYWRITE that conflict with with definitions in ALLOW rule could permit authenticated remote users to submit computation jobs,...

[SECURITY] Fedora 9 Update: condor-7.0.4-1.fc9

Condor is a specialized workload management system for compute-intensive jobs. Like other full-featured batch systems, Condor provides a job queueing mechanism, scheduling policy, priority scheme, resource monitoring, and resource management. Users submit their serial or parallel jobs to Condor,...

condor: incorrect handling of wild cards in authorization lists

Condor before 7.0.4 does not properly handle wildcards in the ALLOWWRITE, DENYWRITE, HOSTALLOWWRITE, or HOSTDENYWRITE configuration variables in authorization policy lists, which might allow remote attackers to bypass intended access restrictions...