CVE-2008-3830 Condor before 7.0.5 does not properly handle when the configuration specifies overlapping netmasks in allow or deny rules, which causes the rule to be ignored and allows attackers to bypass intended a...
HighCVSS 7.2
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Condor before 7.0.5 does not properly handle when the configuration specifies overlapping netmasks in allow or deny rules, which causes the rule to be ignored and allows attackers to bypass intended access restrictions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| condor project condor | <= 7.0.4 | No fix listed |
| condor project condor | = 6.8.0 | No fix listed |
| condor project condor | = 6.8.1 | No fix listed |
| condor project condor | = 6.8.2 | No fix listed |
| condor project condor | = 6.8.3 | No fix listed |
| condor project condor | = 6.8.4 | No fix listed |
| condor project condor | = 6.8.5 | No fix listed |
| condor project condor | = 6.8.6 | No fix listed |
| condor project condor | = 6.8.7 | No fix listed |
| condor project condor | = 6.8.8 | No fix listed |
| condor project condor | = 6.8.9 | No fix listed |
| condor project condor | = 7.0.0 | No fix listed |
| condor project condor | = 7.0.1 | No fix listed |
| condor project condor | = 7.0.2 | No fix listed |
| condor project condor | = 7.0.3 | No fix listed |
References
- 32189 third-party-advisory vendor-advisory
- 32193 third-party-advisory
- 32232 third-party-advisory
- www.cs.wisc.edu vendor-advisory
- RHSA-2008:0911 vendor-advisory
- RHSA-2008:0924 vendor-advisory
- 31621 vdb-entry
- 1021002 vdb-entry
- ADV-2008-2760 vdb-entry
- FEDORA-2008-8733 vendor-advisory
- Debian Security Tracker CVE-2008-3830 vendor-advisory