CVE-2012-4462

Condor - Denial of Service via Square Brackets in cproc Option

Title source: llm
STIX 2.1

Description

aviary/jobcontrol.py in Condor, as used in Red Hat Enterprise MRG 2.3, when removing a job, allows remote attackers to cause a denial of service (condor_schedd restart) via square brackets in the cproc option.

References (4)

Core 4
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-0564.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-0565.html
Issue Tracking x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=860850

Scores

EPSS 0.0227
EPSS Percentile 81.0%

Details

CWE
CWE-20
Status published
Products (2)
condor_project/condor 7.8.0
redhat/enterprise_mrg 2.3
Published Mar 14, 2013
Tracked Since Feb 18, 2026