CVE-2012-3416: Critical severity Condor Project Condor vulnerability
Published Aug 25, 2012
·Updated
Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOWADMINISTRATOR or ALLOWWRITE by connecting from a system with a spoofed reverse DNS hostname.
Affected Software
39 affected components
Condor Project Condor<=7.8.1
Condor Project Condor=6.5.4
Condor Project Condor=6.8.0
Condor Project Condor=6.8.1
Condor Project Condor=6.8.2
Condor Project Condor=6.8.3
Condor Project Condor=6.8.4
Condor Project Condor=6.8.5
Condor Project Condor=6.8.6
Condor Project Condor=6.8.7
Condor Project Condor=6.8.8
Condor Project Condor=6.8.9
Condor Project Condor=7.00
Condor Project Condor=7.0.0
Condor Project Condor=7.0.1
Condor Project Condor=7.0.2
Condor Project Condor=7.0.3
Condor Project Condor=7.0.4
Condor Project Condor=7.0.5
Condor Project Condor=7.0.6
Condor Project Condor=7.01
Condor Project Condor=7.1.0
Condor Project Condor=7.1.1
Condor Project Condor=7.1.2
Condor Project Condor=7.1.3
Condor Project Condor=7.1.4
Condor Project Condor=7.02
Condor Project Condor=7.2.0
Condor Project Condor=7.2.1
Condor Project Condor=7.2.2
Condor Project Condor=7.2.3
Condor Project Condor=7.2.4
Condor Project Condor=7.03
Condor Project Condor=7.3.0
Condor Project Condor=7.3.1
Condor Project Condor=7.3.2
Condor Project Condor=7.4.0
Condor Project Condor=7.4.1
Condor Project Condor=7.8.0
Event History
Aug 25, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-3416?
CVE-2012-3416 has a high severity rating due to the potential for remote attackers to bypass host-based authentication.
2
How do I fix CVE-2012-3416?
To address CVE-2012-3416, upgrade to HTCondor version 7.8.2 or later.
3
What systems are affected by CVE-2012-3416?
CVE-2012-3416 affects HTCondor versions prior to 7.8.2, including versions 6.5.4 to 7.0.6.
4
What type of vulnerability is CVE-2012-3416?
CVE-2012-3416 is an authentication bypass vulnerability that allows unauthorized access and privilege escalation.
5
Can CVE-2012-3416 be exploited remotely?
Yes, CVE-2012-3416 can be exploited remotely by attackers using a spoofed reverse DNS hostname.