Condor Arbitrary Code Execution Vulnerability

The Condor Project is a program that develops, implements, deploys, and evaluates mechanisms and strategies to support High Throughput Computer Technology HTC. An arbitrary code execution vulnerability exists in Condor that can be exploited by an attacker to execute arbitrary code in the context ...

RHEL 6 : condor (RHSA-2015:0035)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:0035 advisory. HTCondor is a specialized workload management system for compute-intensive jobs. It provides a job queuing mechanism, scheduling policy, priority...

RHEL 5 : condor (RHSA-2015:0036)

Updated condor packages that fix one security issue are now available for Red Hat Enterprise MRG 2.5 for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

condor: mailx invocation enables code execution as condor user

The HTCondor scheduler can optionally notify a user of completed jobs by sending an email. Due to the way the daemon sent the email message, authenticated users able to submit jobs could execute arbitrary code with the privileges of the condor user...

condor: mailx invocation enables code execution as condor user

The HTCondor scheduler can optionally notify a user of completed jobs by sending an email. Due to the way the daemon sent the email message, authenticated users able to submit jobs could execute arbitrary code with the privileges of the condor user...

CVE-2014-7754

The Condor S.E. aka com.appcondorsoutheast.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7754

The Condor S.E. aka com.appcondorsoutheast.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Condor S.E. aka com.appcondorsoutheast.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7754

The CVE-2014-7754 entry applies to Condor S.E. (com.app_condorsoutheast.layout) Android app, version 1.399, which does not verify X.509 certificates from SSL servers. The underlying issue is a failure in SSL certificate validation, allowing man-in-the-middle attackers to spoof servers and obtain ...

CVE-2014-7754

The Condor S.E. aka com.appcondorsoutheast.layout application 1.399 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Core Secrets — NSA Used ‘Undercover Agents’ In Foreign Companies

Sometimes we wonder that how the National Security Agency NSA reached such a wide range of its Surveillance operation across the world – which you can measure from several secret documents released by the former NSA contractor Edward Snowden. This hell parameter of the NSA’s operation was not...

RHEL 6 : MRG (RHSA-2012:0099)

Updated Grid component packages that fix multiple security issues, multiple bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2 for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common...

RHEL 6 : condor (RHSA-2012:1169)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:1169 advisory. Condor is a specialized workload management system for compute-intensive jobs. It provides a job queuing mechanism, scheduling policy, priority schem...

RHEL 5 : condor (RHSA-2012:1168)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:1168 advisory. - condor: host based authentication does not implement forward-confirmed reverse dns CVE-2012-3416 Note that Nessus has not tested for this issue but...

RHEL 5 : MRG (RHSA-2013:0561)

Updated Messaging component packages that fix multiple security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2.3 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common...

RHEL 6 : Red Hat Enterprise MRG Grid 2.2 (RHSA-2012:1281)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1281 advisory. Red Hat Enterprise MRG Messaging, Realtime, and Grid is a next-generation IT infrastructure for enterprise computing. MRG offers increased...

RHEL 5 : MRG (RHSA-2012:1278)

Updated Grid component packages that fix several security issues, add various enhancements and fix multiple bugs are now available for Red Hat Enterprise MRG 2 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common...

CVE-2012-5390

The standard universe shadow condorshadow.std component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly check privileges, which allows remote attackers to gain privileges via a crafted standard universe job...

CVE-2012-5390

The standard universe shadow condorshadow.std component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly check privileges, which allows remote attackers to gain privileges via a crafted standard universe job...

Code injection

The standard universe shadow condorshadow.std component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly check privileges, which allows remote attackers to gain privileges via a crafted standard universe job...