NVD

Id
51279  
Name
CVE-2009-4133  
Description
Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-12-23  
Modified Date
2010-01-06  
Seq
2009-4133  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
260055 51279 CVE-2009-4133 http://condor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1018  View
260056 51279 CVE-2009-4133 1023378  View
260057 51279 CVE-2009-4133 http://www.cs.wisc.edu/condor/manual/v7.4/8_3Stable_Release.html#SECTION00931000000000000000  View
260058 51279 CVE-2009-4133 http://www.cs.wisc.edu/condor/security/vulnerabilities/CONDOR-2009-0001.html  View
260059 51279 CVE-2009-4133 RHSA-2009:1688  View
260060 51279 CVE-2009-4133 RHSA-2009:1689  View
260061 51279 CVE-2009-4133 37443  View
260062 51279 CVE-2009-4133 condor-jobs-security-bypass(54984)  View
260063 51279 CVE-2009-4133 https://bugzilla.redhat.com/show_bug.cgi?id=544371  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42930 JVNDB-2009-003937 MRG の Grid Execute Node で使用される Condor における権限を取得される脆弱性 MRG、MRG の Grid、および MRG の Grid Execute Node で使用される Condor には、任意のユーザとしてジョブを待ち行列にされる、および権限を取得される脆弱性が存在します。 CVE-2009-4133 41564 CVE-2009-4133 51279 6.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003937.html 2009-12-23 2012-06-26 View