Description
Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRITE configuration variables in authorization policy lists, which might allow remote attackers to bypass intended access restrictions.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://secunia.com/advisories/31423 ↗
- http://www.redhat.com/support/errata/RHSA-2008-0816.html ↗
- http://secunia.com/advisories/31459 ↗
- https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00252.html ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44063 ↗
- http://www.securitytracker.com/id?1020646 ↗
- http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#sec:New-7-0-4 ↗
- http://www.securityfocus.com/bid/30440 ↗
- http://secunia.com/advisories/31284 ↗
- http://www.redhat.com/support/errata/RHSA-2008-0814.html ↗