Condor up to 7.6.9/7.8.3 my_popen.cpp my_popenv_impl/my_spawnv return value

Summaryinfo

A vulnerability, which was classified as very critical, has been found in Condor up to 7.6.9/7.8.3. This affects the function my_popenv_impl/my_spawnv of the file src/condor_utils/my_popen.cpp. This manipulation causes return value. This vulnerability appears as CVE-2012-3490. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability classified as very critical was found in Condor up to 7.6.9/7.8.3. Affected by this vulnerability is the function my_popenv_impl/my_spawnv of the file src/condor_utils/my_popen.cpp. The manipulation with an unknown input leads to a return value vulnerability. The CWE definition for the vulnerability is CWE-252. The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

The (1) my_popenv_impl and (2) my_spawnv functions in src/condor_utils/my_popen.cpp and the (3) systemCommand function in condor_vm-gahp/vmgahp_common.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the return value of setuid calls, which might cause a subprocess to be created with root privileges and allow remote attackers to gain privileges via unspecified vectors.

The weakness was presented 04/21/2023. The advisory is shared at condor-git.cs.wisc.edu. This vulnerability is known as CVE-2012-3490 since 06/14/2012. The exploitation appears to be easy. The attack can be launched remotely. The successful exploitation needs a single authentication. Technical details are known, but no exploit is available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 04/21/2023).

Upgrading to version 7.6.10 or 7.8.4 eliminates this vulnerability. The upgrade is hosted for download at research.cs.wisc.edu. Applying a patch is able to eliminate this problem. The bugfix is ready for download at condor-git.cs.wisc.edu. The best possible mitigation is suggested to be upgrading to the latest version.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Name

• Condor

Version

• 7.6.0
• 7.6.1
• 7.6.2
• 7.6.3
• 7.6.4
• 7.6.5
• 7.6.6
• 7.6.7
• 7.6.8
• 7.6.9
• 7.8.0
• 7.8.1
• 7.8.2
• 7.8.3

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion