Unscored severity · published Oct 8, 2008
CVE-2008-3830
Condor before 7.0.5 does not properly handle when the configuration specifies overlapping netmasks in allow or deny rules, which causes the rule to be ignored and allows attackers…
–
CVSS
0.4%
EPSS
No
On KEV
Description
Condor before 7.0.5 does not properly handle when the configuration specifies overlapping netmasks in allow or deny rules, which causes the rule to be ignored and allows attackers to bypass intended access restrictions.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Condor · Condor Project
through 7.0.4; 6.8.0; 6.8.1; 6.8.2; 6.8.3; 6.8.4; +9 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3830
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3830
Vendor Advisory
http://secunia.com/advisories/32189
secunia.com
http://secunia.com/advisories/32193
secunia.com
http://secunia.com/advisories/32232
Vendor Advisory
http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#SECTION00931000000000000000
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2008-0911.html
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2008-0924.html
More from Condor
–
CVE-2012-5390
The standard universe shadow (condor_shadow.std) component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly check privileges, which allows remote…
–
CVE-2011-4930
Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local…
–
CVE-2013-4255
The policy definition evaluator in Condor 7.5.4, 8.0.0, and earlier does not properly handle attributes in a (1) PREEMPT, (2) SUSPEND, (3) CONTINUE, (4) WANT_VACATE, or (5) KILL…
–
CVE-2009-5136
The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which allows remote…
–
CVE-2012-4462
aviary/jobcontrol.py in Condor, as used in Red Hat Enterprise MRG 2.3, when removing a job, allows remote attackers to cause a denial of service (condor_schedd restart) via square…