Red Hat Security AdvisoryRHSA-2008:0924
condor security, bug fix and enhancement update
Released 2008-10-07 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat MRG Grid for RHEL-4 AS condor-7.0.5-2.el4, condor-7.0.5-2.el4.i386, condor-static-7.0.5-2.el4 +1
- Red Hat MRG Grid for RHEL-4 ES condor-7.0.5-2.el4, condor-7.0.5-2.el4.i386, condor-static-7.0.5-2.el4 +1
Fixes 4 records
Priority LOW 32
Condor before 7.0.5 does not properly handle when the configuration specifies overlapping netmasks in allow or deny rules, which causes the rule to be ignored and allows attackers to bypass intended access restrictions.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00388 · Published 2008-10-08 · Fixed CWE-264
Priority LOW 27
Unspecified vulnerability in the condor_ schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of service (crash) via unknown vectors.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01896 · Published 2008-10-08 · Fixed
Priority LOW 22
Stack-based buffer overflow in the condor_ schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00529 · Published 2008-10-08 · Fixed CWE-119
Priority LOW 21
Unspecified vulnerability in Condor before 7.0.5 allows attackers to execute jobs as other users via unknown vectors.
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00386 · Published 2008-10-08 · Fixed CWE-264