CVE

Id
33541  
CVE No.
CVE-2008-3424  
Status
Candidate  
Description
Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRITE configuration variables in authorization policy lists, which might allow remote attackers to bypass intended access restrictions.  
Phase
Assigned (20080731)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
365160 33541 CVE-2008-3424 CONFIRM:http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#sec:New-7-0-4  View
365161 33541 CVE-2008-3424 FEDORA:FEDORA-2008-7205  View
365162 33541 CVE-2008-3424 URL:https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00252.html  View
365163 33541 CVE-2008-3424 REDHAT:RHSA-2008:0814  View
365164 33541 CVE-2008-3424 URL:http://www.redhat.com/support/errata/RHSA-2008-0814.html  View
365165 33541 CVE-2008-3424 REDHAT:RHSA-2008:0816  View
365166 33541 CVE-2008-3424 URL:http://www.redhat.com/support/errata/RHSA-2008-0816.html  View
365167 33541 CVE-2008-3424 BID:30440  View
365168 33541 CVE-2008-3424 URL:http://www.securityfocus.com/bid/30440  View
365169 33541 CVE-2008-3424 SECTRACK:1020646  View
365170 33541 CVE-2008-3424 URL:http://www.securitytracker.com/id?1020646  View
365171 33541 CVE-2008-3424 SECUNIA:31284  View
365172 33541 CVE-2008-3424 URL:http://secunia.com/advisories/31284  View
365173 33541 CVE-2008-3424 SECUNIA:31459  View
365174 33541 CVE-2008-3424 URL:http://secunia.com/advisories/31459  View
365175 33541 CVE-2008-3424 SECUNIA:31423  View
365176 33541 CVE-2008-3424 URL:http://secunia.com/advisories/31423  View
365177 33541 CVE-2008-3424 XF:condor-authpolicy-security-bypass(44063)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50780 JVNDB-2008-006090 phpFreeChat におけるセッションをハイジャックされる脆弱性 phpFreeChat には、セッションをハイジャックされる脆弱性が存在します。 CVE-2008-3428 33541 6.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006090.html  View