CVE-2008-3424 Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRITE configuration variables in authorization policy lists, which might allow remot...
HighCVSS 7.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRITE configuration variables in authorization policy lists, which might allow remote attackers to bypass intended access restrictions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| condor project condor | < 7.0.4 | 7.0.4 |
| fedoraproject fedora | = 9 | No fix listed |
References
- 31284 broken-link third-party-advisory vendor-advisory
- 31423 broken-link third-party-advisory
- 31459 broken-link third-party-advisory
- www.cs.wisc.edu broken-link
- RHSA-2008:0814 broken-link vendor-advisory
- RHSA-2008:0816 broken-link vendor-advisory
- 30440 broken-link third-party-advisory vdb-entry
- 1020646 broken-link third-party-advisory vdb-entry
- condor-authpolicy-security-bypass(44063) third-party-advisory vdb-entry
- FEDORA-2008-7205 mailing-list vendor-advisory
- Debian Security Tracker CVE-2008-3424 vendor-advisory