Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2012-5390

Опубликовано: 06 июн. 2014
Источник: nvd
CVSS2: 10
EPSS Низкий

Описание

The standard universe shadow (condor_shadow.std) component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly check privileges, which allows remote attackers to gain privileges via a crafted standard universe job.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:condor_project:condor:7.9.0:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:condor_project:condor:7.8.0:*:*:*:*:*:*:*
cpe:2.3:a:condor_project:condor:7.8.1:*:*:*:*:*:*:*
cpe:2.3:a:condor_project:condor:7.8.2:*:*:*:*:*:*:*
cpe:2.3:a:condor_project:condor:7.8.3:*:*:*:*:*:*:*
cpe:2.3:a:condor_project:condor:7.8.4:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:a:condor_project:condor:7.7.3:*:*:*:*:*:*:*
cpe:2.3:a:condor_project:condor:7.7.4:*:*:*:*:*:*:*
cpe:2.3:a:condor_project:condor:7.7.5:*:*:*:*:*:*:*
cpe:2.3:a:condor_project:condor:7.7.6:*:*:*:*:*:*:*

EPSS

Процентиль: 83%
0.02491
Низкий

10 Critical

CVSS2

Дефекты

CWE-264

Связанные уязвимости

ubuntu
около 12 лет назад

The standard universe shadow (condor_shadow.std) component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly check privileges, which allows remote attackers to gain privileges via a crafted standard universe job.

redhat
почти 14 лет назад

The standard universe shadow (condor_shadow.std) component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly check privileges, which allows remote attackers to gain privileges via a crafted standard universe job.

debian
около 12 лет назад

The standard universe shadow (condor_shadow.std) component in Condor 7 ...

github
около 4 лет назад

The standard universe shadow (condor_shadow.std) component in Condor 7.7.3 through 7.7.6, 7.8.0 before 7.8.5, and 7.9.0 does no properly check privileges, which allows remote attackers to gain privileges via a crafted standard universe job.

EPSS

Процентиль: 83%
0.02491
Низкий

10 Critical

CVSS2

Дефекты

CWE-264