CVE-2012-3416 Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS ho...
HighCVSS 10.0
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/condor(Debian:13) | < 7.8.2~dfsg.1-1 | 7.8.2~dfsg.1-1 |
| debian/condor(Debian:14) | < 7.8.2~dfsg.1-1 | 7.8.2~dfsg.1-1 |
| condor project condor | <= 7.8.1 | No fix listed |
| condor project condor | = 6.5.4 | No fix listed |
| condor project condor | = 6.8.0 | No fix listed |
| condor project condor | = 6.8.1 | No fix listed |
| condor project condor | = 6.8.2 | No fix listed |
| condor project condor | = 6.8.3 | No fix listed |
| condor project condor | = 6.8.4 | No fix listed |
| condor project condor | = 6.8.5 | No fix listed |
| condor project condor | = 6.8.6 | No fix listed |
| condor project condor | = 6.8.7 | No fix listed |
| condor project condor | = 6.8.8 | No fix listed |
| condor project condor | = 6.8.9 | No fix listed |
| condor project condor | = 7.00 | No fix listed |
| condor project condor | = 7.0.0 | No fix listed |
| condor project condor | = 7.0.1 | No fix listed |
| condor project condor | = 7.0.2 | No fix listed |
| condor project condor | = 7.0.3 | No fix listed |
| condor project condor | = 7.0.4 | No fix listed |
| condor project condor | = 7.0.5 | No fix listed |
| condor project condor | = 7.0.6 | No fix listed |
| condor project condor | = 7.01 | No fix listed |
| condor project condor | = 7.1.0 | No fix listed |
| condor project condor | = 7.1.1 | No fix listed |
Show 16 more
| Product | Affected versions | Fixed in |
|---|---|---|
| condor project condor | = 7.1.2 | No fix listed |
| condor project condor | = 7.1.3 | No fix listed |
| condor project condor | = 7.1.4 | No fix listed |
| condor project condor | = 7.02 | No fix listed |
| condor project condor | = 7.2.0 | No fix listed |
| condor project condor | = 7.2.1 | No fix listed |
| condor project condor | = 7.2.2 | No fix listed |
| condor project condor | = 7.2.3 | No fix listed |
| condor project condor | = 7.2.4 | No fix listed |
| condor project condor | = 7.03 | No fix listed |
| condor project condor | = 7.3.0 | No fix listed |
| condor project condor | = 7.3.1 | No fix listed |
| condor project condor | = 7.3.2 | No fix listed |
| condor project condor | = 7.4.0 | No fix listed |
| condor project condor | = 7.4.1 | No fix listed |
| condor project condor | = 7.8.0 | No fix listed |
References
- Debian Security Tracker CVE-2012-3416 vendor-advisory
- 84766 vdb-entry
- research.cs.wisc.edu
- RHSA-2012:1168 vendor-advisory
- RHSA-2012:1169 vendor-advisory
- 50246 third-party-advisory vendor-advisory
- 50294 third-party-advisory vendor-advisory
- 55032 vdb-entry
- 1027395 vdb-entry
- condor-reverse-dns-security-bypass(77748) vdb-entry
- bugs.debian.org issue-tracking