Description (CNA)
src/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle jobs via unspecified vectors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://bugzilla.redhat.com/show_bug.cgi?id=848214
- http://www.securityfocus.com/bid/55632
- http://rhn.redhat.com/errata/RHSA-2012-1278.html
- http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html
- http://rhn.redhat.com/errata/RHSA-2012-1281.html
- http://condor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdiff%3Bh=1fff5d40
- http://secunia.com/advisories/50666
- http://www.openwall.com/lists/oss-security/2012/09/20/9
- http://research.cs.wisc.edu/condor/manual/v7.6/8_3Stable_Release.html
ADP enrichment
No English description supplied.
- https://bugzilla.redhat.com/show_bug.cgi?id=848214
- http://www.securityfocus.com/bid/55632
- http://rhn.redhat.com/errata/RHSA-2012-1278.html
- http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html
- http://rhn.redhat.com/errata/RHSA-2012-1281.html
- http://condor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdiff%3Bh=1fff5d40
- http://secunia.com/advisories/50666
- http://www.openwall.com/lists/oss-security/2012/09/20/9
- http://research.cs.wisc.edu/condor/manual/v7.6/8_3Stable_Release.html