CVE-2008-3424
High
Description
Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRITE configuration variables in authorization policy lists, which might allow remote attackers to bypass intended access restrictions.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Condor
PublishedJul 31, 2008
First seenJul 31, 2008
How to fix
Update
- condor_project condor7.0.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| condor_project condor | v < 7.0.4 | 7.0.4 |
| fedoraproject fedora | 9 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.