Red Hat Security AdvisoryRHSA-2013:0564
Red Hat Enterprise MRG Grid 2.3 security update
Released 2013-03-06 · Red Hat rating Low · View on Red Hat →
Fixed in
- MRG Grid Execute Node for RHEL 5 Server v.2 condor-7.8.8-0.4.1.el5, condor-7.8.8-0.4.1.el5.i386, condor-classads-7.8.8-0.4.1.el5 +26
- MRG Grid for RHEL 5 Server v.2 condor-7.8.8-0.4.1.el5, condor-7.8.8-0.4.1.el5.i386, condor-aviary-7.8.8-0.4.1.el5 +32
- MRG Management for RHEL 5 Server v.2 cumin-0.1.5675-1.el5, python-wallaby-0.16.3-1.el5, sesame-1.0-7.el5 +2
- Red Hat MRG Messaging for RHEL 5 Server v.2 sesame-1.0-7.el5, sesame-1.0-7.el5.i386
Fixes 1 record
Priority LOW 24
aviary/jobcontrol.py in Condor, as used in Red Hat Enterprise MRG 2.3, when removing a job, allows remote attackers to cause a denial of service (condor_schedd restart) via square brackets in the cproc option.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02267 · Published 2013-03-12 · Partial fix CWE-20
