CVE Vulnerabilities

CVE-2010-4179

Published: Dec 07, 2010 | Modified: Feb 13, 2023
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
7.5 IMPORTANT
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V3
Ubuntu

The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid (MRG) 1.3 recommends that Condor should be configured so that the MRG Management Console (cumin) can submit jobs for users, which creates a trusted channel with insufficient access control that allows local users with the ability to publish to a broker to run jobs as arbitrary users via Condor QMF plug-ins.

Affected Software

Name Vendor Start Version End Version
Enterprise_mrg Redhat 1.3 (including) 1.3 (including)
Grid Execute Node for MRG on RHEL-4 RedHat condor-0:7.4.4-0.17.el4 *
Grid for MRG on RHEL-4 RedHat condor-0:7.4.4-0.17.el4 *
Messaging Base for MRG on RHEL-4 RedHat python-qmf-0:0.7.946106-14.el4 *
Messaging Base for MRG on RHEL-4 RedHat qpid-cpp-mrg-0:0.7.946106-22.el4 *
Messaging Base for MRG on RHEL-4 RedHat qpid-java-0:0.7.946106-12.el4 *
Messaging Base for MRG on RHEL-4 RedHat sesame-0:0.7.4297-4.el4 *
Messaging for MRG on RHEL-4 RedHat python-qmf-0:0.7.946106-14.el4 *
Messaging for MRG on RHEL-4 RedHat qpid-cpp-mrg-0:0.7.946106-22.el4 *
Messaging for MRG on RHEL-4 RedHat qpid-java-0:0.7.946106-12.el4 *
Messaging for MRG on RHEL-4 RedHat sesame-0:0.7.4297-4.el4 *
MRG for RHEL-5 RedHat condor-0:7.4.4-0.17.el5 *
MRG for RHEL-5 RedHat cumin-0:0.1.4410-2.el5 *
MRG for RHEL-5 RedHat python-qmf-0:0.7.946106-14.el5 *
MRG for RHEL-5 RedHat qpid-cpp-mrg-0:0.7.946106-22.el5 *
MRG for RHEL-5 RedHat qpid-java-0:0.7.946106-12.el5 *
MRG for RHEL-5 RedHat sesame-0:0.7.4297-4.el5 *

References