CVEvulnerability
CVE-2008-3830
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-10-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Condor before 7.0.5 does not properly handle when the configuration specifies overlapping netmasks in allow or deny rules, which causes the rule to be ignored and allows attackers to bypass intended access restrictions.
Affected configurations
• condor project condor (<= 7.0.4)
• condor project condor 6.8.0
• condor project condor 6.8.1
• condor project condor 6.8.2
• condor project condor 6.8.3
• condor project condor 6.8.4
• condor project condor 6.8.5
• condor project condor 6.8.6
• condor project condor 6.8.7
• condor project condor 6.8.8
• condor project condor 6.8.9
• condor project condor 7.0.0
• condor project condor 7.0.1
• condor project condor 7.0.2
• condor project condor 7.0.3
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/32189 Vendor Advisory
- http://secunia.com/advisories/32193 secunia.com
- http://secunia.com/advisories/32232 secunia.com
- http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#SECTION00931000000000000000 Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-0911.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2008-0924.html www.redhat.com
- http://www.securityfocus.com/bid/31621 www.securityfocus.com
- http://www.securitytracker.com/id?1021002 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/2760 www.vupen.com
- https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00264.html www.redhat.com
- http://secunia.com/advisories/32189 Vendor Advisory
- http://secunia.com/advisories/32193 secunia.com
- http://secunia.com/advisories/32232 secunia.com
- http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#SECTION00931000000000000000 Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-0911.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2008-0924.html www.redhat.com
- http://www.securityfocus.com/bid/31621 www.securityfocus.com
- http://www.securitytracker.com/id?1021002 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/2760 www.vupen.com
- https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00264.html www.redhat.com