« Volver al listado

CVE-2012-3493

Estado: ModificadaMedia (5.8)—

The command_give_request_ad function in condor_startd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the condor_startd port, which leaks the ClaimId.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Condor Project — Condor

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-3493",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-09-28T17:55:01.350",
  "references": [
    {
      "url": "http://condor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdiff%3Bh=d2f33972",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://research.cs.wisc.edu/condor/manual/v7.6/8_3Stable_Release.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2012-1278.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2012-1281.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://secunia.com/advisories/50666",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/09/20/9",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/55632",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=848222",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://condor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdiff%3Bh=d2f33972",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://research.cs.wisc.edu/condor/manual/v7.6/8_3Stable_Release.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2012-1278.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://rhn.redhat.com/errata/RHSA-2012-1281.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/50666",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/09/20/9",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/55632",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=848222",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The command_give_request_ad function in condor_startd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the condor_startd port, which leaks the ClaimId."
    },
    {
      "lang": "es",
      "value": "La función command_give_request_ad en condor_startd.V6/command.cpp en Condor v7.6.x antes de v7.6.10 y v7.8.x antes de v7.8.4 permite a atacantes remotos obtener información sensible y posiblemente controlar o iniciar trabajos (jobs) de su elección a través de una solicitud ClassAd al puerto condor_startd, lo provoca una fuga del ClaimID."
    }
  ],
  "lastModified": "2026-06-16T23:43:20.050",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:condor_project:condor:7.6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E2260133-CF29-4F2F-A05E-ED5FF10F190A"
            },
            {
              "criteria": "cpe:2.3:a:condor_project:condor:7.6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DF8B138A-F2DF-4B12-8B00-CC234D7E4BFD"
            },
            {
              "criteria": "cpe:2.3:a:condor_project:condor:7.6.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33F6FDB7-FB85-4879-81E8-CBC0BA027C85"
            },
            {
              "criteria": "cpe:2.3:a:condor_project:condor:7.6.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1A225C35-3DF2-4C5A-B3D6-BC70FCB6C241"
            },
            {
              "criteria": "cpe:2.3:a:condor_project:condor:7.6.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E4BA94AB-761B-44BB-A188-FC609789BF30"
            },
            {
              "criteria": "cpe:2.3:a:condor_project:condor:7.6.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E4A6DF33-B8D9-41DA-8620-5C93813E7971"
            },
            {
              "criteria": "cpe:2.3:a:condor_project:condor:7.6.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1DA2856A-EE5A-4E64-BF4B-2101D782B2A0"
            },
            {
              "criteria": "cpe:2.3:a:condor_project:condor:7.6.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "59C2E93D-5983-4F40-AE61-B299FFB84E47"
            },
            {
              "criteria": "cpe:2.3:a:condor_project:condor:7.6.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5EDBB354-1B7E-43D1-B23F-35309272A37A"
            },
            {
              "criteria": "cpe:2.3:a:condor_project:condor:7.6.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B660525B-3A88-4AF2-86E6-B8E93B65DF61"
            },
            {
              "criteria": "cpe:2.3:a:condor_project:condor:7.8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6A1C1780-D08E-4E91-9379-CC6070360859"
            },
            {
              "criteria": "cpe:2.3:a:condor_project:condor:7.8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD6855FF-3285-48CA-951B-7B2CD53CCB16"
            },
            {
              "criteria": "cpe:2.3:a:condor_project:condor:7.8.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "536EBEBB-3957-4080-84D8-AC77A1452F2A"
            },
            {
              "criteria": "cpe:2.3:a:condor_project:condor:7.8.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "31EC8BC4-F8F8-41E5-A823-D640B2719554"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}