Condor Multiple Format String Vulnerabilities

Bugtraq ID:	51879
Class:	Unknown
CVE:	CVE-2011-4930
Remote:	Yes
Local:	No
Published:	Feb 07 2012 12:00AM
Updated:	Apr 13 2015 09:00PM
Credit:	Reported by vendor
Vulnerable:	Condor Condor 7.4.1 Condor Condor 7.4 Condor Condor 7.6.4 Condor Condor 7.2.0
Not Vulnerable:	Condor Condor 7.6.5

Condor Multiple Format String Vulnerabilities

Condor is prone to multiple format-string vulnerabilities.

Attackers can leverage these issues to cause denial-of-service conditions. Due to nature of these issues, arbitrary code-execution within the context of the vulnerable application is also possible.

Condor 7.2.0 to 7.6.4 are vulnerable.

Condor Multiple Format String Vulnerabilities

Attacker can exploit these issues using readily available tools.

Condor Multiple Format String Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

Condor Multiple Format String Vulnerabilities

References:

• Bug 759548 - (CVE-2011-4930) CVE-2011-4930 Condor: Multiple format string flaws (Condor)
  
• Condor Homepage (Condor)
  
• GIT Commit: Fix some compiler warnings related to printf format strings (Condor)
  
• CONDOR-2012-0001 (Condor)