CVE-2011-4930
10.02.2014, 18:15
Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.Enginsight
| Vendor | Product | Version |
|---|---|---|
| condor_project | condor | 7.2.0 |
| condor_project | condor | 7.2.1 |
| condor_project | condor | 7.2.2 |
| condor_project | condor | 7.2.3 |
| condor_project | condor | 7.2.4 |
| condor_project | condor | 7.2.5 |
| condor_project | condor | 7.3.0 |
| condor_project | condor | 7.3.1 |
| condor_project | condor | 7.3.2 |
| condor_project | condor | 7.4.0 |
| condor_project | condor | 7.4.1 |
| condor_project | condor | 7.4.2 |
| condor_project | condor | 7.5.4 |
| condor_project | condor | 7.6.0 |
| condor_project | condor | 7.6.1 |
| condor_project | condor | 7.6.2 |
| condor_project | condor | 7.6.3 |
| condor_project | condor | 7.6.4 |
| redhat | enterprise_mrg | 1.3 |
| redhat | enterprise_mrg | 2.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References