CVE-2009-4133
Condor: queue super user cannot drop privs
Severity Score
6.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute.
Condor v6.5.4 hasta v7.2.4, v7.3.x, y v7.4.0, como el usado en MRG, Grid para MRG, y Grid Execute Node para MRG, permite a usuarios autenticados remotamente encolar tareas como un usuario de su elección, y de ese modo obtener privilegios, usando una herramienta de línea de commandos Condor para modificar un atributo de tarea no especificado.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2009-12-01 CVE Reserved
- 2009-12-23 CVE Published
- 2024-02-10 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (12)
| URL | Tag | Source |
|---|---|---|
| http://condor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1018 | X_refsource_misc | |
| http://securitytracker.com/id?1023378 | Vdb Entry | |
| http://www.securityfocus.com/bid/37443 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/54984 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 6.5.4 Search vendor "Condor Project" for product "Condor" and version "6.5.4" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 6.8.0 Search vendor "Condor Project" for product "Condor" and version "6.8.0" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 6.8.1 Search vendor "Condor Project" for product "Condor" and version "6.8.1" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 6.8.2 Search vendor "Condor Project" for product "Condor" and version "6.8.2" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 6.8.3 Search vendor "Condor Project" for product "Condor" and version "6.8.3" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 6.8.4 Search vendor "Condor Project" for product "Condor" and version "6.8.4" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 6.8.5 Search vendor "Condor Project" for product "Condor" and version "6.8.5" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 6.8.6 Search vendor "Condor Project" for product "Condor" and version "6.8.6" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 6.8.7 Search vendor "Condor Project" for product "Condor" and version "6.8.7" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 6.8.8 Search vendor "Condor Project" for product "Condor" and version "6.8.8" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 6.8.9 Search vendor "Condor Project" for product "Condor" and version "6.8.9" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 7.0.0 Search vendor "Condor Project" for product "Condor" and version "7.0.0" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 7.0.1 Search vendor "Condor Project" for product "Condor" and version "7.0.1" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 7.0.2 Search vendor "Condor Project" for product "Condor" and version "7.0.2" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 7.0.3 Search vendor "Condor Project" for product "Condor" and version "7.0.3" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 7.0.4 Search vendor "Condor Project" for product "Condor" and version "7.0.4" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 7.0.5 Search vendor "Condor Project" for product "Condor" and version "7.0.5" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 7.0.6 Search vendor "Condor Project" for product "Condor" and version "7.0.6" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 7.1.0 Search vendor "Condor Project" for product "Condor" and version "7.1.0" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 7.1.1 Search vendor "Condor Project" for product "Condor" and version "7.1.1" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 7.1.2 Search vendor "Condor Project" for product "Condor" and version "7.1.2" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 7.1.3 Search vendor "Condor Project" for product "Condor" and version "7.1.3" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 7.1.4 Search vendor "Condor Project" for product "Condor" and version "7.1.4" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 7.2.0 Search vendor "Condor Project" for product "Condor" and version "7.2.0" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 7.2.1 Search vendor "Condor Project" for product "Condor" and version "7.2.1" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 7.2.2 Search vendor "Condor Project" for product "Condor" and version "7.2.2" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 7.2.3 Search vendor "Condor Project" for product "Condor" and version "7.2.3" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 7.2.4 Search vendor "Condor Project" for product "Condor" and version "7.2.4" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 7.3.0 Search vendor "Condor Project" for product "Condor" and version "7.3.0" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 7.3.1 Search vendor "Condor Project" for product "Condor" and version "7.3.1" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 7.3.2 Search vendor "Condor Project" for product "Condor" and version "7.3.2" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|
| Condor Project Search vendor "Condor Project" | Condor Search vendor "Condor Project" for product "Condor" | 7.4.0 Search vendor "Condor Project" for product "Condor" and version "7.4.0" | - |
Affected
| in | Redhat Search vendor "Redhat" | Enterprise Mrg Search vendor "Redhat" for product "Enterprise Mrg" | 1.2 Search vendor "Redhat" for product "Enterprise Mrg" and version "1.2" | - |
Affected
|