CVE-2008-3424
Fixed in a distro release EPSS 3%
Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRITE configuration variables in authorization policy lists, which might allow remote attackers to bypass intended access restrictions.
Products: condor_project condor, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat enterprise mrg 1 | condor | 0:7.0.4-4.el5 |
| Red Hat enterprise mrg 1 | condor-debuginfo | 0:7.0.4-4.el5 |
| Red Hat enterprise mrg 1 | condor-static | 0:7.0.4-4.el5 |
| Red Hat enterprise mrg 1.0 | condor | 0:7.0.4-4.el4 |
| Red Hat enterprise mrg 1.0 | condor-debuginfo | 0:7.0.4-4.el4 |
| Red Hat enterprise mrg 1.0 | condor-static | 0:7.0.4-4.el4 |