Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-3493
HistorySep 28, 2012 - 12:00 a.m.

CVE-2012-3493

2012-09-2800:00:00
ubuntu.com
ubuntu.com
10

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.004 Low

EPSS

Percentile

72.9%

The command_give_request_ad function in condor_startd.V6/command.cpp Condor
7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to
obtain sensitive information, and possibly control or start arbitrary jobs,
via a ClassAd request to the condor_startd port, which leaks the ClaimId.

Bugs

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

0.004 Low

EPSS

Percentile

72.9%