Ubuntu.comUB:CVE-2009-5136CVE-2009-5136
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
0.005 Low
EPSS
Percentile
75.6%
The policy definition evaluator in Condor before 7.4.2 does not properly
handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED
state, which allows remote authenticated users to cause a denial of service
(condor_startd exit) via a crafted job.
References
research.cs.wisc.edu/htcondor/manual/v7.6/8_5Stable_Release.html
rhn.redhat.com/errata/RHSA-2010-0773.html
bugzilla.redhat.com/show_bug.cgi?id=540545
htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1001
launchpad.net/bugs/cve/CVE-2009-5136
nvd.nist.gov/vuln/detail/CVE-2009-5136
security-tracker.debian.org/tracker/CVE-2009-5136
www.cve.org/CVERecord?id=CVE-2009-5136
Related
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
0.005 Low
EPSS
Percentile
75.6%