Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Condor | Condor_project | * | 7.8.1 (including) |
| Condor | Condor_project | 6.5.4 (including) | 6.5.4 (including) |
| Condor | Condor_project | 6.8.0 (including) | 6.8.0 (including) |
| Condor | Condor_project | 6.8.1 (including) | 6.8.1 (including) |
| Condor | Condor_project | 6.8.2 (including) | 6.8.2 (including) |
| Condor | Condor_project | 6.8.3 (including) | 6.8.3 (including) |
| Condor | Condor_project | 6.8.4 (including) | 6.8.4 (including) |
| Condor | Condor_project | 6.8.5 (including) | 6.8.5 (including) |
| Condor | Condor_project | 6.8.6 (including) | 6.8.6 (including) |
| Condor | Condor_project | 6.8.7 (including) | 6.8.7 (including) |
| Condor | Condor_project | 6.8.8 (including) | 6.8.8 (including) |
| Condor | Condor_project | 6.8.9 (including) | 6.8.9 (including) |
| Condor | Condor_project | 7.00 (including) | 7.00 (including) |
| Condor | Condor_project | 7.0.0 (including) | 7.0.0 (including) |
| Condor | Condor_project | 7.0.1 (including) | 7.0.1 (including) |
| Condor | Condor_project | 7.0.2 (including) | 7.0.2 (including) |
| Condor | Condor_project | 7.0.3 (including) | 7.0.3 (including) |
| Condor | Condor_project | 7.0.4 (including) | 7.0.4 (including) |
| Condor | Condor_project | 7.0.5 (including) | 7.0.5 (including) |
| Condor | Condor_project | 7.0.6 (including) | 7.0.6 (including) |
| Condor | Condor_project | 7.01 (including) | 7.01 (including) |
| Condor | Condor_project | 7.1.0 (including) | 7.1.0 (including) |
| Condor | Condor_project | 7.1.1 (including) | 7.1.1 (including) |
| Condor | Condor_project | 7.1.2 (including) | 7.1.2 (including) |
| Condor | Condor_project | 7.1.3 (including) | 7.1.3 (including) |
| Condor | Condor_project | 7.1.4 (including) | 7.1.4 (including) |
| Condor | Condor_project | 7.02 (including) | 7.02 (including) |
| Condor | Condor_project | 7.2.0 (including) | 7.2.0 (including) |
| Condor | Condor_project | 7.2.1 (including) | 7.2.1 (including) |
| Condor | Condor_project | 7.2.2 (including) | 7.2.2 (including) |
| Condor | Condor_project | 7.2.3 (including) | 7.2.3 (including) |
| Condor | Condor_project | 7.2.4 (including) | 7.2.4 (including) |
| Condor | Condor_project | 7.03 (including) | 7.03 (including) |
| Condor | Condor_project | 7.3.0 (including) | 7.3.0 (including) |
| Condor | Condor_project | 7.3.1 (including) | 7.3.1 (including) |
| Condor | Condor_project | 7.3.2 (including) | 7.3.2 (including) |
| Condor | Condor_project | 7.4.0 (including) | 7.4.0 (including) |
| Condor | Condor_project | 7.4.1 (including) | 7.4.1 (including) |
| Condor | Condor_project | 7.8.0 (including) | 7.8.0 (including) |
| MRG for RHEL-5 v. 2 | RedHat | condor-0:7.6.5-0.14.2.el5 | * |
| Red Hat Enterprise MRG 2 | RedHat | condor-0:7.6.5-0.14.2.el6_3 | * |
| Condor | Ubuntu | lucid | * |
| Condor | Ubuntu | natty | * |
| Condor | Ubuntu | oneiric | * |
| Condor | Ubuntu | upstream | * |