CVE-2012-3492
28.09.2012, 17:55
The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication directories even when they have weak permissions, which allows remote attackers to impersonate users by renaming a user's authentication directory.Enginsight
| Vendor | Product | Version |
|---|---|---|
| condor_project | condor | 7.6.0 |
| condor_project | condor | 7.6.1 |
| condor_project | condor | 7.6.2 |
| condor_project | condor | 7.6.3 |
| condor_project | condor | 7.6.4 |
| condor_project | condor | 7.6.5 |
| condor_project | condor | 7.6.6 |
| condor_project | condor | 7.6.7 |
| condor_project | condor | 7.6.8 |
| condor_project | condor | 7.6.9 |
| condor_project | condor | 7.8.0 |
| condor_project | condor | 7.8.1 |
| condor_project | condor | 7.8.2 |
| condor_project | condor | 7.8.3 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References