CVE-2012-3491
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2012-3491
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2012-3491.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2012-3491
- Related
- Published
- 2012-09-28T17:55:01Z
- Modified
- 2024-09-18T02:10:43.771896Z
- Summary
- [none]
- Details
-
src/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle jobs via unspecified vectors.
- References
-
- http://rhn.redhat.com/errata/RHSA-2012-1278.html
- http://rhn.redhat.com/errata/RHSA-2012-1281.html
- http://secunia.com/advisories/50666
- https://bugzilla.redhat.com/show_bug.cgi?id=848214
- http://condor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdiff%3Bh=1fff5d40
- http://research.cs.wisc.edu/condor/manual/v7.6/8_3Stable_Release.html
- http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html
- http://www.openwall.com/lists/oss-security/2012/09/20/9
- http://www.securityfocus.com/bid/55632
- https://security-tracker.debian.org/tracker/CVE-2012-3491
Affected packages
Debian:13 / condor
Package
- Name
- condor
- Purl
- pkg:deb/debian/condor?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed7.8.2~dfsg.1-1+deb7u1