Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:1169 advisory.

    Condor is a specialized workload management system for compute-intensive     jobs. It provides a job queuing mechanism, scheduling policy, priority     scheme, and resource monitoring and management.

    Condor installations that rely solely upon host-based authentication were     vulnerable to an attacker who controls an IP, its reverse-DNS entry and has     knowledge of a target site's security configuration. With this control and     knowledge, the attacker could bypass the target site's host-based     authentication and be authorized to perform privileged actions (i.e.
    actions requiring ALLOW_ADMINISTRATOR or ALLOW_WRITE). Condor deployments     using host-based authentication that contain no hostnames (IPs or IP globs     only) or use authentication stronger than host-based are not vulnerable.
    (CVE-2012-3416)

    Note: Condor will not run jobs as root; therefore, this flaw cannot lead to     a compromise of the root user account.

    Red Hat would like to thank Ken Hahn and Dan Bradley for reporting this     issue.

    All Red Hat Enterprise MRG 2.1 users are advised to upgrade to these     updated packages, which contain a backported patch to correct this issue.
    Condor must be restarted for the update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:1168 advisory.

  - condor: host based authentication does not implement forward-confirmed reverse dns (CVE-2012-3416)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Catchup build with CVE fix Update to 7.9.0 developer series. Happy condor week

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
76647	RHEL 6 : condor (RHSA-2012:1169)	Nessus	Red Hat Local Security Checks	critical
76646	RHEL 5 : condor (RHSA-2012:1168)	Nessus	Red Hat Local Security Checks	critical
61755	Fedora 17 : condor-7.9.1-0.1.fc17.2 (2012-12127)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2012-3416

critical

Tenable Plugins

critical

critical

critical