CVE-2008-3830

Condor before 7.0.5 does not properly handle when the configuration specifies overlapping netmasks in allow or deny rules, which causes the rule to be ignored and allows attackers to bypass intended access restrictions.

Link	Resource
http://secunia.com/advisories/32193
http://www.securityfocus.com/bid/31621
http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#SECTION00931000000000000000	Vendor Advisory
http://www.securitytracker.com/id?1021002
http://www.redhat.com/support/errata/RHSA-2008-0924.html
http://www.redhat.com/support/errata/RHSA-2008-0911.html
http://secunia.com/advisories/32189	Vendor Advisory
http://secunia.com/advisories/32232
https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00264.html
http://www.vupen.com/english/advisories/2008/2760

Configuration 1

cpe:2.3:a:condor_project:condor:6.8.1:*:*:*:*:*:*:* cpe:2.3:a:condor_project:condor:6.8.4:*:*:*:*:*:*:* cpe:2.3:a:condor_project:condor:7.0.0:*:*:*:*:*:*:* cpe:2.3:a:condor_project:condor:*:*:*:*:*:*:*:* cpe:2.3:a:condor_project:condor:6.8.9:*:*:*:*:*:*:* cpe:2.3:a:condor_project:condor:6.8.0:*:*:*:*:*:*:* cpe:2.3:a:condor_project:condor:6.8.6:*:*:*:*:*:*:* cpe:2.3:a:condor_project:condor:6.8.7:*:*:*:*:*:*:* cpe:2.3:a:condor_project:condor:6.8.3:*:*:*:*:*:*:* cpe:2.3:a:condor_project:condor:7.0.1:*:*:*:*:*:*:* cpe:2.3:a:condor_project:condor:7.0.2:*:*:*:*:*:*:* cpe:2.3:a:condor_project:condor:7.0.3:*:*:*:*:*:*:* cpe:2.3:a:condor_project:condor:6.8.5:*:*:*:*:*:*:* cpe:2.3:a:condor_project:condor:6.8.8:*:*:*:*:*:*:* cpe:2.3:a:condor_project:condor:6.8.2:*:*:*:*:*:*:*

---

Published : 2008-10-08 10:00

Updated : 2011-03-08 03:11

---

NVD link : CVE-2008-3830

Mitre link : CVE-2008-3830

No products.

CWE-264