CVE-2011-3620
Fixed in a distro release EPSS 5%
Apache Qpid 0.12 does not properly verify credentials during the joining of a cluster, which allows remote attackers to obtain access to the messaging functionality and job functionality of a cluster by leveraging knowledge of a cluster-username.
Products: apache qpid
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat enterprise mrg 2 | condor | 0:7.6.5-0.14.el5 |
| Red Hat enterprise mrg 2 | condor-aviary | 0:7.6.5-0.14.el5 |
| Red Hat enterprise mrg 2 | condor-classads | 0:7.6.5-0.14.el5 |
| Red Hat enterprise mrg 2 | condor-debuginfo | 0:7.6.5-0.14.el5 |
| Red Hat enterprise mrg 2 | condor-kbdd | 0:7.6.5-0.14.el5 |
| Red Hat enterprise mrg 2 | condor-qmf | 0:7.6.5-0.14.el5 |
| Red Hat enterprise mrg 2 | condor-vm-gahp | 0:7.6.5-0.14.el5 |
| Red Hat enterprise mrg 2 | python-qpid | 0:0.14-6.el5 |
| Red Hat enterprise mrg 2 | python-qpid-qmf | 0:0.14-9.el5 |
| Red Hat enterprise mrg 2 | qpid-cpp-client | 0:0.14-14.el5 |
| Red Hat enterprise mrg 2 | qpid-cpp-client-devel | 0:0.14-14.el5 |
| Red Hat enterprise mrg 2 | qpid-cpp-client-devel-docs | 0:0.14-14.el5 |
| Red Hat enterprise mrg 2 | qpid-cpp-client-rdma | 0:0.14-14.el5 |
| Red Hat enterprise mrg 2 | qpid-cpp-client-ssl | 0:0.14-14.el5 |
| Red Hat enterprise mrg 2 | qpid-cpp-mrg | 0:0.14-14.el5 |
| Red Hat enterprise mrg 2 | qpid-cpp-mrg-debuginfo | 0:0.14-14.el5 |
| Red Hat enterprise mrg 2 | qpid-cpp-server | 0:0.14-14.el5 |
| Red Hat enterprise mrg 2 | qpid-cpp-server-cluster | 0:0.14-14.el5 |
| Red Hat enterprise mrg 2 | qpid-cpp-server-devel | 0:0.14-14.el5 |
| Red Hat enterprise mrg 2 | qpid-cpp-server-rdma | 0:0.14-14.el5 |
| Red Hat enterprise mrg 2 | qpid-cpp-server-ssl | 0:0.14-14.el5 |
| Red Hat enterprise mrg 2 | qpid-cpp-server-store | 0:0.14-14.el5 |
| Red Hat enterprise mrg 2 | qpid-cpp-server-xml | 0:0.14-14.el5 |
| Red Hat enterprise mrg 2 | qpid-java | 0:0.14-3.el5 |
| Red Hat enterprise mrg 2 | qpid-java-client | 0:0.14-3.el5 |
| Red Hat enterprise mrg 2 | qpid-java-common | 0:0.14-3.el5 |
| Red Hat enterprise mrg 2 | qpid-java-example | 0:0.14-3.el5 |
| Red Hat enterprise mrg 2 | qpid-jca | 0:0.14-9.el5 |
| Red Hat enterprise mrg 2 | qpid-jca-xarecovery | 0:0.14-9.el5 |
| Red Hat enterprise mrg 2 | qpid-qmf | 0:0.14-9.el5 |
| Red Hat enterprise mrg 2 | qpid-qmf-debuginfo | 0:0.14-9.el5 |
| Red Hat enterprise mrg 2 | qpid-qmf-devel | 0:0.14-9.el5 |
| Red Hat enterprise mrg 2 | qpid-tests | 0:0.14-1.el5 |
| Red Hat enterprise mrg 2 | qpid-tools | 0:0.14-2.el5 |
| Red Hat enterprise mrg 2 | ruby-qpid-qmf | 0:0.14-9.el5 |
| Red Hat enterprise mrg 2 | sesame | 0:1.0-3.el5 |
| Red Hat enterprise mrg 2 | sesame-debuginfo | 0:1.0-3.el5 |
| Red Hat enterprise mrg 2 computenode el6 | condor | 0:7.6.5-0.14.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-classads | 0:7.6.5-0.14.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-debuginfo | 0:7.6.5-0.14.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-kbdd | 0:7.6.5-0.14.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-qmf | 0:7.6.5-0.14.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-vm-gahp | 0:7.6.5-0.14.el6 |
| Red Hat enterprise mrg 2 computenode el6 | sesame | 0:1.0-5.el6 |
| Red Hat enterprise mrg 2 computenode el6 | sesame-debuginfo | 0:1.0-5.el6 |
| Red Hat enterprise mrg 2 server el6 | condor | 0:7.6.5-0.14.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-aviary | 0:7.6.5-0.14.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-classads | 0:7.6.5-0.14.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-debuginfo | 0:7.6.5-0.14.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-kbdd | 0:7.6.5-0.14.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-plumage | 0:7.6.5-0.14.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-qmf | 0:7.6.5-0.14.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-vm-gahp | 0:7.6.5-0.14.el6 |
| Red Hat enterprise mrg 2 server el6 | qpid-cpp | 0:0.14-14.el6_2 |
| Red Hat enterprise mrg 2 server el6 | qpid-cpp-client-devel | 0:0.14-14.el6_2 |
| Red Hat enterprise mrg 2 server el6 | qpid-cpp-client-devel-docs | 0:0.14-14.el6_2 |
| Red Hat enterprise mrg 2 server el6 | qpid-cpp-client-rdma | 0:0.14-14.el6_2 |
| Red Hat enterprise mrg 2 server el6 | qpid-cpp-debuginfo | 0:0.14-14.el6_2 |
| Red Hat enterprise mrg 2 server el6 | qpid-cpp-server-cluster | 0:0.14-14.el6_2 |
| Red Hat enterprise mrg 2 server el6 | qpid-cpp-server-devel | 0:0.14-14.el6_2 |
| Red Hat enterprise mrg 2 server el6 | qpid-cpp-server-rdma | 0:0.14-14.el6_2 |
| Red Hat enterprise mrg 2 server el6 | qpid-cpp-server-store | 0:0.14-14.el6_2 |
| Red Hat enterprise mrg 2 server el6 | qpid-cpp-server-xml | 0:0.14-14.el6_2 |
| Red Hat enterprise mrg 2 server el6 | qpid-java | 0:0.14-3.el6 |
| Red Hat enterprise mrg 2 server el6 | qpid-java-client | 0:0.14-3.el6 |
| Red Hat enterprise mrg 2 server el6 | qpid-java-common | 0:0.14-3.el6 |
| Red Hat enterprise mrg 2 server el6 | qpid-java-example | 0:0.14-3.el6 |
| Red Hat enterprise mrg 2 server el6 | qpid-jca | 0:0.14-9.el6 |
| Red Hat enterprise mrg 2 server el6 | qpid-jca-xarecovery | 0:0.14-9.el6 |
| Red Hat enterprise mrg 2 server el6 | qpid-qmf | 0:0.14-7.el6_2 |
| Red Hat enterprise mrg 2 server el6 | qpid-qmf-debuginfo | 0:0.14-7.el6_2 |
| Red Hat enterprise mrg 2 server el6 | qpid-qmf-devel | 0:0.14-7.el6_2 |
| Red Hat enterprise mrg 2 server el6 | sesame | 0:1.0-5.el6 |
| Red Hat enterprise mrg 2 server el6 | sesame-debuginfo | 0:1.0-5.el6 |