CVE Vulnerabilities

CVE-2008-3830

Published: Oct 08, 2008 | Modified: Mar 08, 2011
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Condor before 7.0.5 does not properly handle when the configuration specifies overlapping netmasks in allow or deny rules, which causes the rule to be ignored and allows attackers to bypass intended access restrictions.

Affected Software

Name Vendor Start Version End Version
Condor Condor_project * 7.0.4 (including)
Condor Condor_project 6.8.0 (including) 6.8.0 (including)
Condor Condor_project 6.8.1 (including) 6.8.1 (including)
Condor Condor_project 6.8.2 (including) 6.8.2 (including)
Condor Condor_project 6.8.3 (including) 6.8.3 (including)
Condor Condor_project 6.8.4 (including) 6.8.4 (including)
Condor Condor_project 6.8.5 (including) 6.8.5 (including)
Condor Condor_project 6.8.6 (including) 6.8.6 (including)
Condor Condor_project 6.8.7 (including) 6.8.7 (including)
Condor Condor_project 6.8.8 (including) 6.8.8 (including)
Condor Condor_project 6.8.9 (including) 6.8.9 (including)
Condor Condor_project 7.0.0 (including) 7.0.0 (including)
Condor Condor_project 7.0.1 (including) 7.0.1 (including)
Condor Condor_project 7.0.2 (including) 7.0.2 (including)
Condor Condor_project 7.0.3 (including) 7.0.3 (including)
Grid for MRG on RHEL-4 RedHat condor-0:7.0.5-2.el4 *
MRG for RHEL-5 RedHat condor-0:7.0.5-2.el5 *

References