CVE-2009-5136

The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:N/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
VendorProductVersion
condor_projectcondor
𝑥
≤ 7.4.1
condor_projectcondor
7.4.0
redhatenterprise_mrg
1.0
redhatenterprise_mrg
1.0.1
redhatenterprise_mrg
1.0.2
redhatenterprise_mrg
1.0.3
redhatenterprise_mrg
1.1.1
redhatenterprise_mrg
1.1.2
redhatenterprise_mrg
1.2
redhatenterprise_mrg
1.2.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
condor
sid
23.6.2+dfsg-2
fixed
trixie
23.6.2+dfsg-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
condor
saucy
not-affected
raring
not-affected
quantal
not-affected
precise
dne
lucid
ignored
Common Weakness Enumeration
References
http://research.cs.wisc.edu/htcondor/manual/v7.6/8_5Stable_Release.html
http://rhn.redhat.com/errata/RHSA-2010-0773.html
https://bugzilla.redhat.com/show_bug.cgi?id=540545
https://htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1001
http://research.cs.wisc.edu/htcondor/manual/v7.6/8_5Stable_Release.html
http://rhn.redhat.com/errata/RHSA-2010-0773.html
https://bugzilla.redhat.com/show_bug.cgi?id=540545
https://htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1001