NVD

Id
52231  
Name
CVE-2009-5136  
Description
The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2013-10-11  
Modified Date
2013-10-15  
Seq
2009-5136  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
263542 52231 CVE-2009-5136 http://research.cs.wisc.edu/htcondor/manual/v7.6/8_5Stable_Release.html  View
263543 52231 CVE-2009-5136 RHSA-2010:0773  View
263544 52231 CVE-2009-5136 https://bugzilla.redhat.com/show_bug.cgi?id=540545  View
263545 52231 CVE-2009-5136 https://htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1001  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45607 JVNDB-2009-006614 Condor のポリシー定義エバリュエータにおける SQL インジェクションの脆弱性 Condor のポリシー定義エバリュエータ (policy definition evaluator) は、UNDEFINED 状態を評価する WANT_SUSPEND ポリシーの属性を適切に処理しないため、サービス運用妨害 (condor_startd の終了) 状態にされる脆弱性が存在します。 CVE-2009-5136 42567 CVE-2009-5136 52231 4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006614.html 2009-11-25 2013-10-16 View