Condor Prior to 7.0.5 Multiple Security Vulnerabilities

Bugtraq ID:	31621
Class:	Unknown
CVE:	CVE-2008-3826 CVE-2008-3828 CVE-2008-3829 CVE-2008-3830
Remote:	Yes
Local:	No
Published:	Oct 07 2008 12:00AM
Updated:	Oct 10 2008 05:38PM
Credit:	The vendor disclosed these issues.
Vulnerable:	RedHat Enterprise MRG v1 for Red Hat Enterprise Linux ES version 4 RedHat Enterprise MRG v1 for Red Hat Enterprise Linux AS verison 4 RedHat Enterprise MRG v1 for Red Hat Enterprise Linux version 5 Red Hat Fedora 9 Condor Condor 7.0.4
Not Vulnerable:	Condor Condor 7.0.5

Condor Prior to 7.0.5 Multiple Security Vulnerabilities

Condor is prone to multiple vulnerabilities, including:

- A privilege-escalation issue related to job submission
- A stack-based buffer-overflow vulnerability in 'cron-schedd'
- A denial-of-service vulnerability in 'cron-schedd'
- An access-validation vulnerability

These issues affect versions prior to Condor 7.0.5.

Condor Prior to 7.0.5 Multiple Security Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Condor Prior to 7.0.5 Multiple Security Vulnerabilities

Solution:
An updated version is available; please see the references for more information.

Condor Prior to 7.0.5 Multiple Security Vulnerabilities

References:

• Condor 7.0.5 Release Notes (Condor)
  
• Condor Homepage (Condor)