Read the docs
TI-2012-02945 Aliases CVE-2012-3416GHSA-g6rg-4rx4-gw4m

Condor before 7.8.2 allows remote attackers to bypass host-based authentication and…

Priority MEDIUM 51CWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
Partial Red Hat: 5 fixed, 1 without a fix

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-287.

Summary

Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.

Why it matters now

EPSS 0.05102 92nd percentileScored 2026-11-07
Fix Partial Red Hat: 2 advisoriesRed Hat: 5 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 39

CPEVersionsRoleVendor
cpe:2.3:a:condor_project:condor:*:*:*:*:*:*:*:*up to 7.8.1VulnerableCondor Project
cpe:2.3:a:condor_project:condor:6.5.4:*:*:*:*:*:*:*6.5.4VulnerableCondor Project
cpe:2.3:a:condor_project:condor:6.8.0:*:*:*:*:*:*:*6.8.0VulnerableCondor Project
cpe:2.3:a:condor_project:condor:6.8.1:*:*:*:*:*:*:*6.8.1VulnerableCondor Project
cpe:2.3:a:condor_project:condor:6.8.2:*:*:*:*:*:*:*6.8.2VulnerableCondor Project
cpe:2.3:a:condor_project:condor:6.8.3:*:*:*:*:*:*:*6.8.3VulnerableCondor Project
cpe:2.3:a:condor_project:condor:6.8.4:*:*:*:*:*:*:*6.8.4VulnerableCondor Project
cpe:2.3:a:condor_project:condor:6.8.5:*:*:*:*:*:*:*6.8.5VulnerableCondor Project
cpe:2.3:a:condor_project:condor:6.8.6:*:*:*:*:*:*:*6.8.6VulnerableCondor Project
cpe:2.3:a:condor_project:condor:6.8.7:*:*:*:*:*:*:*6.8.7VulnerableCondor Project
  • cpe:2.3:a:condor_project:condor:*:*:*:*:*:*:*:* Versions up to 7.8.1 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:6.5.4:*:*:*:*:*:*:* Versions 6.5.4 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:6.8.0:*:*:*:*:*:*:* Versions 6.8.0 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:6.8.1:*:*:*:*:*:*:* Versions 6.8.1 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:6.8.2:*:*:*:*:*:*:* Versions 6.8.2 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:6.8.3:*:*:*:*:*:*:* Versions 6.8.3 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:6.8.4:*:*:*:*:*:*:* Versions 6.8.4 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:6.8.5:*:*:*:*:*:*:* Versions 6.8.5 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:6.8.6:*:*:*:*:*:*:* Versions 6.8.6 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:6.8.7:*:*:*:*:*:*:* Versions 6.8.7 Vulnerable ·Condor Project
Show 29 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:condor_project:condor:6.8.8:*:*:*:*:*:*:*6.8.8VulnerableCondor Project
cpe:2.3:a:condor_project:condor:6.8.9:*:*:*:*:*:*:*6.8.9VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.00:*:*:*:*:*:*:*7.00VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.0.0:*:*:*:*:*:*:*7.0.0VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.0.1:*:*:*:*:*:*:*7.0.1VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.0.2:*:*:*:*:*:*:*7.0.2VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.0.3:*:*:*:*:*:*:*7.0.3VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.0.4:*:*:*:*:*:*:*7.0.4VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.0.5:*:*:*:*:*:*:*7.0.5VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.0.6:*:*:*:*:*:*:*7.0.6VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.01:*:*:*:*:*:*:*7.01VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.1.0:*:*:*:*:*:*:*7.1.0VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.1.1:*:*:*:*:*:*:*7.1.1VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.1.2:*:*:*:*:*:*:*7.1.2VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.1.3:*:*:*:*:*:*:*7.1.3VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.1.4:*:*:*:*:*:*:*7.1.4VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.02:*:*:*:*:*:*:*7.02VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.2.0:*:*:*:*:*:*:*7.2.0VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.2.1:*:*:*:*:*:*:*7.2.1VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.2.2:*:*:*:*:*:*:*7.2.2VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.2.3:*:*:*:*:*:*:*7.2.3VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.2.4:*:*:*:*:*:*:*7.2.4VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.03:*:*:*:*:*:*:*7.03VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.3.0:*:*:*:*:*:*:*7.3.0VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.3.1:*:*:*:*:*:*:*7.3.1VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.3.2:*:*:*:*:*:*:*7.3.2VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.4.0:*:*:*:*:*:*:*7.4.0VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.4.1:*:*:*:*:*:*:*7.4.1VulnerableCondor Project
cpe:2.3:a:condor_project:condor:7.8.0:*:*:*:*:*:*:*7.8.0VulnerableCondor Project
  • cpe:2.3:a:condor_project:condor:6.8.8:*:*:*:*:*:*:* Versions 6.8.8 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:6.8.9:*:*:*:*:*:*:* Versions 6.8.9 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.00:*:*:*:*:*:*:* Versions 7.00 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.0.0:*:*:*:*:*:*:* Versions 7.0.0 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.0.1:*:*:*:*:*:*:* Versions 7.0.1 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.0.2:*:*:*:*:*:*:* Versions 7.0.2 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.0.3:*:*:*:*:*:*:* Versions 7.0.3 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.0.4:*:*:*:*:*:*:* Versions 7.0.4 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.0.5:*:*:*:*:*:*:* Versions 7.0.5 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.0.6:*:*:*:*:*:*:* Versions 7.0.6 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.01:*:*:*:*:*:*:* Versions 7.01 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.1.0:*:*:*:*:*:*:* Versions 7.1.0 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.1.1:*:*:*:*:*:*:* Versions 7.1.1 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.1.2:*:*:*:*:*:*:* Versions 7.1.2 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.1.3:*:*:*:*:*:*:* Versions 7.1.3 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.1.4:*:*:*:*:*:*:* Versions 7.1.4 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.02:*:*:*:*:*:*:* Versions 7.02 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.2.0:*:*:*:*:*:*:* Versions 7.2.0 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.2.1:*:*:*:*:*:*:* Versions 7.2.1 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.2.2:*:*:*:*:*:*:* Versions 7.2.2 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.2.3:*:*:*:*:*:*:* Versions 7.2.3 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.2.4:*:*:*:*:*:*:* Versions 7.2.4 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.03:*:*:*:*:*:*:* Versions 7.03 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.3.0:*:*:*:*:*:*:* Versions 7.3.0 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.3.1:*:*:*:*:*:*:* Versions 7.3.1 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.3.2:*:*:*:*:*:*:* Versions 7.3.2 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.4.0:*:*:*:*:*:*:* Versions 7.4.0 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.4.1:*:*:*:*:*:*:* Versions 7.4.1 Vulnerable ·Condor Project
  • cpe:2.3:a:condor_project:condor:7.8.0:*:*:*:*:*:*:* Versions 7.8.0 Vulnerable ·Condor Project

Remediation

Red Hat 2 advisories

  • RHSA-2012:1169 Released 2012-08-14 · Red Hat rating Important
    condor security update
    • Red Hat MRG Grid Execute Node for RHEL 6 ComputeNode v.2 condor-7.6.5-0.14.2.el6_3, condor-classads-7.6.5-0.14.2.el6_3, condor-kbdd-7.6.5-0.14.2.el6_3 +2
    • Red Hat MRG Grid Execute Node for RHEL 6 Server v.2 condor-7.6.5-0.14.2.el6_3, condor-classads-7.6.5-0.14.2.el6_3, condor-kbdd-7.6.5-0.14.2.el6_3 +2
    • Red Hat MRG Grid for RHEL 6 Server v.2 condor-7.6.5-0.14.2.el6_3, condor-aviary-7.6.5-0.14.2.el6_3, condor-classads-7.6.5-0.14.2.el6_3 +5
  • RHSA-2012:1168 Released 2012-08-14 · Red Hat rating Important
    condor security update
    • MRG Grid Execute Node for RHEL 5 Server v.2 condor-7.6.5-0.14.2.el5, condor-7.6.5-0.14.2.el5.i386, condor-classads-7.6.5-0.14.2.el5 +7
    • MRG Grid for RHEL 5 Server v.2 condor-7.6.5-0.14.2.el5, condor-7.6.5-0.14.2.el5.i386, condor-aviary-7.6.5-0.14.2.el5 +9

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise MRG 1AffectedNo fix planned: Will not fix
MRG Grid Execute Node for RHEL 5 Server v.2Fixed RHSA-2012:1168
MRG Grid for RHEL 5 Server v.2Fixed RHSA-2012:1168
Red Hat MRG Grid Execute Node for RHEL 6 ComputeNode v.2Fixed RHSA-2012:1169
Red Hat MRG Grid Execute Node for RHEL 6 Server v.2Fixed RHSA-2012:1169
Red Hat MRG Grid for RHEL 6 Server v.2Fixed RHSA-2012:1169

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-3416
  2. 2026-10-03 Alias added: GHSA-g6rg-4rx4-gw4m

References

Advisory 2

Other 2

  • TI-2012-04563 The standard universe shadow (condor_shadow.std) component in Condor 7.7.3 through 7.7.6… CVSS 2.0HIGH 10.0
  • TI-2012-04382 Multiple buffer overflows in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors. CVSS 2.0HIGH 10.0
  • TI-2012-04383 Multiple unspecified vulnerabilities in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4… CVSS 2.0HIGH 10.0
  • TI-2008-03285 Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE… CVSS 2.0HIGH 7.5
  • TI-2012-03020 The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before… CVSS 2.0MEDIUM 6.4
  • TI-2009-03918 Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid… CVSS 2.0MEDIUM 6.5
See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences