CVE-2012-3416

Condor < 7.8.2 - Unauthenticated Host-Based Authentication Bypass via Spoofed Reverse DNS

Title source: llm
STIX 2.1

Description

Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.

References (9)

Core 9
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/77748
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-1168.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1027395
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/84766
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/50246
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/55032
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/50294
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-1169.html

Scores

EPSS 0.0510
EPSS Percentile 91.3%

Details

CWE
CWE-287
Status published
Products (39)
condor_project/condor 6.5.4
condor_project/condor 6.8.0
condor_project/condor 6.8.1
condor_project/condor 6.8.2
condor_project/condor 6.8.3
condor_project/condor 6.8.4
condor_project/condor 6.8.5
condor_project/condor 6.8.6
condor_project/condor 6.8.7
condor_project/condor 6.8.8
... and 29 more
Published Aug 25, 2012
Tracked Since Feb 18, 2026