CVE-2012-3493
28.09.2012, 17:55
The command_give_request_ad function in condor_startd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the condor_startd port, which leaks the ClaimId.Enginsight
| Vendor | Product | Version |
|---|---|---|
| condor_project | condor | 7.6.0 |
| condor_project | condor | 7.6.1 |
| condor_project | condor | 7.6.2 |
| condor_project | condor | 7.6.3 |
| condor_project | condor | 7.6.4 |
| condor_project | condor | 7.6.5 |
| condor_project | condor | 7.6.6 |
| condor_project | condor | 7.6.7 |
| condor_project | condor | 7.6.8 |
| condor_project | condor | 7.6.9 |
| condor_project | condor | 7.8.0 |
| condor_project | condor | 7.8.1 |
| condor_project | condor | 7.8.2 |
| condor_project | condor | 7.8.3 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References