Red Hat Security AdvisoryRHSA-2012:1169
condor security update
Released 2012-08-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat MRG Grid Execute Node for RHEL 6 ComputeNode v.2 condor-7.6.5-0.14.2.el6_3, condor-classads-7.6.5-0.14.2.el6_3, condor-kbdd-7.6.5-0.14.2.el6_3 +2
- Red Hat MRG Grid Execute Node for RHEL 6 Server v.2 condor-7.6.5-0.14.2.el6_3, condor-classads-7.6.5-0.14.2.el6_3, condor-kbdd-7.6.5-0.14.2.el6_3 +2
- Red Hat MRG Grid for RHEL 6 Server v.2 condor-7.6.5-0.14.2.el6_3, condor-aviary-7.6.5-0.14.2.el6_3, condor-classads-7.6.5-0.14.2.el6_3 +5
Fixes 1 record
Priority MEDIUM 51
Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05102 · Published 2012-08-25 · Partial fix CWE-287
