NetSight
IP …
medium4.0

CVE-2009-5136

The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which …

Impact

The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.

Affected products

VendorProductAffected versions
Condor ProjectCondor
through 7.4.1
Version 7.4.0
RedhatEnterprise Mrg
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.1.1, 1.1.2

Weakness classification

CWE-20

References