CVEvulnerability

CVE-2012-3416

10.0 HIGH Published 2012-08-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-08-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-287

Description

Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.

Affected configurations

• condor project condor (<= 7.8.1) • condor project condor 6.5.4 • condor project condor 6.8.0 • condor project condor 6.8.1 • condor project condor 6.8.2 • condor project condor 6.8.3 • condor project condor 6.8.4 • condor project condor 6.8.5 • condor project condor 6.8.6 • condor project condor 6.8.7 • condor project condor 6.8.8 • condor project condor 6.8.9 • condor project condor 7.00 • condor project condor 7.0.0 • condor project condor 7.0.1 • condor project condor 7.0.2 • condor project condor 7.0.3 • condor project condor 7.0.4 • condor project condor 7.0.5 • condor project condor 7.0.6 • condor project condor 7.01 • condor project condor 7.1.0 • condor project condor 7.1.1 • condor project condor 7.1.2 • condor project condor 7.1.3 • condor project condor 7.1.4 • condor project condor 7.02 • condor project condor 7.2.0 • condor project condor 7.2.1 • condor project condor 7.2.2 • condor project condor 7.2.3 • condor project condor 7.2.4 • condor project condor 7.03 • condor project condor 7.3.0 • condor project condor 7.3.1 • condor project condor 7.3.2 • condor project condor 7.4.0 • condor project condor 7.4.1 • condor project condor 7.8.0

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References