The scheduler in HTCondor before 8.2.6 allows remote authenticated users to execute arbitrary code.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4771-1 advisory.

    It was discovered that HTCondor incorrectly invoked the mailx utility. An attacker could use this     vulnerability to execute arbitrary commands. This issue only affected Ubuntu 14.04 ESM. (CVE-2014-8126)

    It was discovered that HTCondor mishandled certain crafted input. An attacker could use this vulnerability     to cause HTCondor to crash. (CVE-2017-16816)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security fix for CVE-2014-8126 and update to latest source 8.3.6

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Florian Weimer, of Red Hat Product Security, discovered an issue in condor, a distributed workload management system. Upon job completion, it can optionally notify a user by sending an email; the mailx invocation used in that process allowed for any authenticated user able to submit jobs, to execute arbitrary code with the privileges of the condor user.

Updated condor packages that fix one security issue are now available for Red Hat Enterprise MRG 2.5 for Red Hat Enterprise Linux 5.

Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

HTCondor is a specialized workload management system for compute-intensive jobs. It provides a job queuing mechanism, scheduling policy, priority scheme, and resource monitoring and management.

The HTCondor scheduler can optionally notify a user of completed jobs by sending an email. Due to the way the daemon sent the email message, authenticated users able to submit jobs could execute arbitrary code with the privileges of the condor user. (CVE-2014-8126)

This issue was discovered by Florian Weimer of Red Hat Product Security.

All Red Hat Enterprise MRG 2.5 users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. HTCondor must be restarted for the update to take effect.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2015:0035 advisory.

    HTCondor is a specialized workload management system for compute-intensive     jobs. It provides a job queuing mechanism, scheduling policy, priority     scheme, and resource monitoring and management.

    The HTCondor scheduler can optionally notify a user of completed jobs by     sending an email. Due to the way the daemon sent the email message,     authenticated users able to submit jobs could execute arbitrary code with     the privileges of the condor user. (CVE-2014-8126)

    This issue was discovered by Florian Weimer of Red Hat Product Security.

    All Red Hat Enterprise MRG 2.5 users are advised to upgrade to these     updated packages, which contain a backported patch to correct this issue.
    HTCondor must be restarted for the update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
183557	Ubuntu 16.04 ESM : HTCondor vulnerabilities (USN-4771-1)	Nessus	Ubuntu Local Security Checks	high
84842	Fedora 21 : condor-8.3.6-1.fc21 (2015-10832)	Nessus	Fedora Local Security Checks	high
81129	Debian DSA-3149-1 : condor - security update	Nessus	Debian Local Security Checks	high
80470	RHEL 5 : condor (RHSA-2015:0036)	Nessus	Red Hat Local Security Checks	high
80469	RHEL 6 : condor (RHSA-2015:0035)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2014-8126

high

Tenable Plugins

high

high

high

high

high