NVD

Id
45085  
Name
CVE-2012-3493  
Description
The command_give_request_ad function in condor_startd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the condor_startd port, which leaks the ClaimId.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-09-28  
Modified Date
2012-10-03  
Seq
2012-3493  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
226103 45085 CVE-2012-3493 http://condor-git.cs.wisc.edu/?p=condor.git;a=commitdiff;h=d2f33972  View
226104 45085 CVE-2012-3493 http://research.cs.wisc.edu/condor/manual/v7.6/8_3Stable_Release.html  View
226105 45085 CVE-2012-3493 http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html  View
226106 45085 CVE-2012-3493 RHSA-2012:1278  View
226107 45085 CVE-2012-3493 RHSA-2012:1281  View
226108 45085 CVE-2012-3493 [oss-security] 20120920 Notification of upstream Condor security fixes  View
226109 45085 CVE-2012-3493 55632  View
226110 45085 CVE-2012-3493 https://bugzilla.redhat.com/show_bug.cgi?id=848222  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28949 JVNDB-2012-004656 Condor の condor_startd.V6/command.cpp における重要な情報を取得される脆弱性 Condor の condor_startd.V6/command.cpp の command_give_request_ad 関数には、重要な情報を取得される、および任意のジョブを制御または開始される脆弱性が存在します。 CVE-2012-3493 56731 CVE-2012-3493 45085 5.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004656.html 2012-09-19 2012-10-22 View