CVE-2008-3424 in Condor

Sumário

de MITRE

Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRITE configuration variables in authorization policy lists, which might allow remote attackers to bypass intended access restrictions.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservar: 31/07/2008
• Divulgação: 31/07/2008
• Moderação: aceite
• Entrada: VDB-43480
• CPE: pronto
• CWE: CWE-264 (confirmado)
• CVSS: 7.3 (VulDB)
• EPSS: 0.02651
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-3424
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-3424
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-3424/