CVE-2009-4133 | BDVDB-2026-39753 Detail
Description#
Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.redhat.com/support/errata/RHSA-2009-1689.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54984
- http://secunia.com/advisories/37766
- http://www.redhat.com/support/errata/RHSA-2009-1688.html
- http://securitytracker.com/id?1023378
- http://www.securityfocus.com/bid/37443
- http://condor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1018
- http://www.cs.wisc.edu/condor/security/vulnerabilities/CONDOR-2009-0001.html
- https://bugzilla.redhat.com/show_bug.cgi?id=544371
- http://secunia.com/advisories/37803
- http://www.cs.wisc.edu/condor/manual/v7.4/8_3Stable_Release.html#SECTION00931000000000000000
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.