CVE-2008-3830

Description

Condor before 7.0.5 does not properly handle when the configuration specifies overlapping netmasks in allow or deny rules, which causes the rule to be ignored and allows attackers to bypass intended access restrictions.

References

https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00264.html

http://www.vupen.com/english/advisories/2008/2760

http://www.securitytracker.com/id?1021002

http://www.securityfocus.com/bid/31621

http://www.redhat.com/support/errata/RHSA-2008-0924.html

http://www.redhat.com/support/errata/RHSA-2008-0911.html

http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#SECTION00931000000000000000

http://secunia.com/advisories/32232

http://secunia.com/advisories/32193

http://secunia.com/advisories/32189

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3