Launchpad CVE tracker

CVE 2012-3491

src/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle jobs via unspecified vectors.

Related bugs and status

CVE-2012-3491 (Candidate) is related to these bugs:

Bug #1058277: Sync condor 7.8.2~dfsg.1-1+deb7u1 (universe) from Debian unstable (main)

Summary				In	Importance	Status
	1058277	Sync condor 7.8.2~dfsg.1-1+deb7u1 (universe) from Debian unstable (main)		condor (Ubuntu)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

References

MLIST: [oss-security] 2012092...
MISC: https://bugzilla.redha...
CONFIRM: http://condor-git.cs.w...
CONFIRM: http://research.cs.wis...
CONFIRM: http://research.cs.wis...
REDHAT: RHSA-2012:1278
REDHAT: RHSA-2012:1281
BID: 55632
SECUNIA: 50666

Launchpad.net

CVE 2012-3491

Related bugs and status

Related bugs

References