CVE-2011-4930
Fixed in a distro release EPSS <1%
Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.
Products: condor_project condor, fedoraproject fedora, redhat enterprise_mrg
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat enterprise mrg 2 | condor | 0:7.6.5-0.12.el5 |
| Red Hat enterprise mrg 2 | condor-aviary | 0:7.6.5-0.12.el5 |
| Red Hat enterprise mrg 2 | condor-classads | 0:7.6.5-0.12.el5 |
| Red Hat enterprise mrg 2 | condor-debuginfo | 0:7.6.5-0.12.el5 |
| Red Hat enterprise mrg 2 | condor-ec2-enhanced | 0:1.3.0-1.el5 |
| Red Hat enterprise mrg 2 | condor-ec2-enhanced-hooks | 0:1.3.0-1.el5 |
| Red Hat enterprise mrg 2 | condor-kbdd | 0:7.6.5-0.12.el5 |
| Red Hat enterprise mrg 2 | condor-qmf | 0:7.6.5-0.12.el5 |
| Red Hat enterprise mrg 2 | condor-vm-gahp | 0:7.6.5-0.12.el5 |
| Red Hat enterprise mrg 2 | condor-wallaby-base-db | 0:1.19-1.el5 |
| Red Hat enterprise mrg 2 | cumin | 0:0.1.5192-1.el5 |
| Red Hat enterprise mrg 2 | python-condorec2e | 0:1.3.0-1.el5 |
| Red Hat enterprise mrg 2 | python-psycopg2 | 0:2.0.14-3.el5 |
| Red Hat enterprise mrg 2 | python-psycopg2-debuginfo | 0:2.0.14-3.el5 |
| Red Hat enterprise mrg 2 | python-wallaby | 0:0.12.5-1.el5 |
| Red Hat enterprise mrg 2 | ruby-spqr | 0:0.3.5-1.el5 |
| Red Hat enterprise mrg 2 | ruby-wallaby | 0:0.12.5-1.el5 |
| Red Hat enterprise mrg 2 | spqr-gen | 0:0.3.5-1.el5 |
| Red Hat enterprise mrg 2 | wallaby | 0:0.12.5-1.el5 |
| Red Hat enterprise mrg 2 | wallaby-utils | 0:0.12.5-1.el5 |
| Red Hat enterprise mrg 2 computenode el6 | condor | 0:7.6.5-0.12.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-classads | 0:7.6.5-0.12.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-debuginfo | 0:7.6.5-0.12.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-kbdd | 0:7.6.5-0.12.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-qmf | 0:7.6.5-0.12.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-vm-gahp | 0:7.6.5-0.12.el6 |
| Red Hat enterprise mrg 2 computenode el6 | condor-wallaby-base-db | 0:1.19-1.el6 |
| Red Hat enterprise mrg 2 computenode el6 | ruby-spqr | 0:0.3.5-1.el6 |
| Red Hat enterprise mrg 2 computenode el6 | ruby-wallaby | 0:0.12.5-1.el6 |
| Red Hat enterprise mrg 2 computenode el6 | spqr-gen | 0:0.3.5-1.el6 |
| Red Hat enterprise mrg 2 computenode el6 | wallaby | 0:0.12.5-1.el6 |
| Red Hat enterprise mrg 2 computenode el6 | wallaby-utils | 0:0.12.5-1.el6 |
| Red Hat enterprise mrg 2 server el6 | condor | 0:7.6.5-0.12.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-aviary | 0:7.6.5-0.12.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-classads | 0:7.6.5-0.12.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-debuginfo | 0:7.6.5-0.12.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-ec2-enhanced | 0:1.3.0-1.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-ec2-enhanced-hooks | 0:1.3.0-1.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-kbdd | 0:7.6.5-0.12.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-plumage | 0:7.6.5-0.12.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-qmf | 0:7.6.5-0.12.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-vm-gahp | 0:7.6.5-0.12.el6 |
| Red Hat enterprise mrg 2 server el6 | condor-wallaby-base-db | 0:1.19-1.el6 |
| Red Hat enterprise mrg 2 server el6 | cumin | 0:0.1.5192-1.el6 |
| Red Hat enterprise mrg 2 server el6 | python-condorec2e | 0:1.3.0-1.el6 |
| Red Hat enterprise mrg 2 server el6 | python-wallaby | 0:0.12.5-1.el6 |
| Red Hat enterprise mrg 2 server el6 | ruby-spqr | 0:0.3.5-1.el6 |
| Red Hat enterprise mrg 2 server el6 | ruby-wallaby | 0:0.12.5-1.el6 |
| Red Hat enterprise mrg 2 server el6 | spqr-gen | 0:0.3.5-1.el6 |
| Red Hat enterprise mrg 2 server el6 | wallaby | 0:0.12.5-1.el6 |
| Red Hat enterprise mrg 2 server el6 | wallaby-utils | 0:0.12.5-1.el6 |