Approved changes feed: RSS · Atom

cpe:2.3:a:condor_project:condor:7.3.0:*:*:*:*:*:*:*

part: a version: 7.3.0 update: *

VendorCondor Project (c4345aee-2cc3-507b-a8b0-62fed4eee73c)
ProductCondor (52c7b7f1-fe3b-5197-8ed7-7f880f4b4eec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/condor purl2cpe 2026-06-01 10:16:33.409846
pkg:deb/ubuntu/condor purl2cpe 2026-06-01 10:16:33.409847
pkg:github/htcondor/htcondor purl2cpe 2026-06-01 10:16:33.409849
pkg:rpm/fedora/condor purl2cpe 2026-06-01 10:16:33.409850
pkg:rpm/opensuse/htcondor purl2cpe 2026-06-01 10:16:33.409852

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-3416 vulnerable 2026-06-08 05:02:09.683227 Details available
Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.
Published: 2012-08-25T10:00:00.000Z
Updated: 2024-08-06T20:05:12.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4930 vulnerable 2026-06-08 04:59:33.909049 Details available
Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.
Published: 2014-02-10T17:00:00.000Z
Updated: 2024-08-07T00:23:38.555Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4133 vulnerable 2026-06-08 04:51:47.210095 Details available
Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute.
Published: 2009-12-23T18:00:00.000Z
Updated: 2024-08-07T06:54:09.951Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.