Approved changes feed: RSS · Atom

cpe:2.3:a:condor_project:condor:7.2.3:*:*:*:*:*:*:*

part: a version: 7.2.3 update: *

VendorCondor Project (c4345aee-2cc3-507b-a8b0-62fed4eee73c)
ProductCondor (52c7b7f1-fe3b-5197-8ed7-7f880f4b4eec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/condor purl2cpe 2026-06-01 10:16:33.409824
pkg:deb/ubuntu/condor purl2cpe 2026-06-01 10:16:33.409825
pkg:github/htcondor/htcondor purl2cpe 2026-06-01 10:16:33.409826
pkg:rpm/fedora/condor purl2cpe 2026-06-01 10:16:33.409828
pkg:rpm/opensuse/htcondor purl2cpe 2026-06-01 10:16:33.409829

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-3416 vulnerable 2026-06-08 05:02:09.681319 Details available
Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.
Published: 2012-08-25T10:00:00.000Z
Updated: 2024-08-06T20:05:12.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4930 vulnerable 2026-06-08 04:59:33.907345 Details available
Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.
Published: 2014-02-10T17:00:00.000Z
Updated: 2024-08-07T00:23:38.555Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4133 vulnerable 2026-06-08 04:51:47.209127 Details available
Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute.
Published: 2009-12-23T18:00:00.000Z
Updated: 2024-08-07T06:54:09.951Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.