CVE-2012-3416

Condor < 7.8.1 - Authentication Bypass

Title source: rule

Description

Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.

References (9)

[Third Party Advisory, VDB Entry] http://osvdb.org/84766

[Various Sources] http://research.cs.wisc.edu/condor/security/vulnerabilities/CONDOR-2012-0002.html

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2012-1168.html

[Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2012-1169.html

[Vendor Advisory] http://secunia.com/advisories/50246

[Vendor Advisory] http://secunia.com/advisories/50294

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1027395

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/77748

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/55032

Scores

EPSS 0.0188

EPSS Percentile 82.9%

Classification

CWE

CWE-287

Status draft

Affected Products (39)

condor_project/condor < 7.8.1

condor_project/condor

... and 24 more

Timeline

Published Aug 25, 2012

Tracked Since Feb 18, 2026