CVE-2012-3490

The 1 mypopenvimpl and 2 myspawnv functions in src/condorutils/mypopen.cpp and the 3 systemCommand function in condorvm-gahp/vmgahpcommon.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the return value of setuid calls, which might cause a subprocess to be created...

CVE-2012-3490

CVE-2012-3490 affects the Condor project (7.6.x before 7.6.10 and 7.8.x before 7.8.4). The vulnerability arises from not properly checking the return value of setuid in (1) my_popenv_impl, (2) my_spawnv (src/condor_utils/my_popen.cpp), and (3) systemCommand (condor_vm-gahp/vmgahp_common.cpp). Thi...