Approved changes feed: RSS · Atom

cpe:2.3:a:condor_project:condor:7.6.8:*:*:*:*:*:*:*

part: a version: 7.6.8 update: *

VendorCondor Project (c4345aee-2cc3-507b-a8b0-62fed4eee73c)
ProductCondor (52c7b7f1-fe3b-5197-8ed7-7f880f4b4eec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/condor purl2cpe 2026-06-01 10:16:33.409968
pkg:deb/ubuntu/condor purl2cpe 2026-06-01 10:16:33.409969
pkg:github/htcondor/htcondor purl2cpe 2026-06-01 10:16:33.409971
pkg:rpm/fedora/condor purl2cpe 2026-06-01 10:16:33.409972
pkg:rpm/opensuse/htcondor purl2cpe 2026-06-01 10:16:33.409974

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-5197 vulnerable 2026-06-08 05:02:55.180179 Details available
Multiple unspecified vulnerabilities in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors related to "error checking of system calls."
Published: 2012-09-28T17:00:00.000Z
Updated: 2024-08-06T20:58:03.181Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5196 vulnerable 2026-06-08 05:02:55.176877 Details available
Multiple buffer overflows in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors.
Published: 2012-09-28T17:00:00.000Z
Updated: 2024-08-06T20:58:03.213Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3493 vulnerable 2026-06-08 05:02:10.193746 Details available
The command_give_request_ad function in condor_startd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the condor_startd port, which leaks the ClaimId.
Published: 2012-09-28T17:00:00.000Z
Updated: 2024-09-16T22:51:51.036Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3492 vulnerable 2026-06-08 05:02:10.193050 Details available
The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication directories even when they have weak permissions, which allows remote attackers to impersonate users by renaming a user's authentication directory.
Published: 2012-09-28T17:00:00.000Z
Updated: 2024-09-16T22:24:48.721Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3491 vulnerable 2026-06-08 05:02:10.189917 Details available
src/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle jobs via unspecified vectors.
Published: 2012-09-28T17:00:00.000Z
Updated: 2024-09-16T23:55:46.109Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.