Approved changes feed: RSS · Atom

cpe:2.3:a:condor_project:condor:7.6.2:*:*:*:*:*:*:*

part: a version: 7.6.2 update: *

VendorCondor Project (c4345aee-2cc3-507b-a8b0-62fed4eee73c)
ProductCondor (52c7b7f1-fe3b-5197-8ed7-7f880f4b4eec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/condor purl2cpe 2026-06-01 10:16:33.409922
pkg:deb/ubuntu/condor purl2cpe 2026-06-01 10:16:33.409924
pkg:github/htcondor/htcondor purl2cpe 2026-06-01 10:16:33.409925
pkg:rpm/fedora/condor purl2cpe 2026-06-01 10:16:33.409927
pkg:rpm/opensuse/htcondor purl2cpe 2026-06-01 10:16:33.409928

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-5197 vulnerable 2026-06-08 05:02:55.180070 Details available
Multiple unspecified vulnerabilities in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors related to "error checking of system calls."
Published: 2012-09-28T17:00:00.000Z
Updated: 2024-08-06T20:58:03.181Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5196 vulnerable 2026-06-08 05:02:55.173909 Details available
Multiple buffer overflows in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 have unknown impact and attack vectors.
Published: 2012-09-28T17:00:00.000Z
Updated: 2024-08-06T20:58:03.213Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3493 vulnerable 2026-06-08 05:02:10.193647 Details available
The command_give_request_ad function in condor_startd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the condor_startd port, which leaks the ClaimId.
Published: 2012-09-28T17:00:00.000Z
Updated: 2024-09-16T22:51:51.036Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3492 vulnerable 2026-06-08 05:02:10.192947 Details available
The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication directories even when they have weak permissions, which allows remote attackers to impersonate users by renaming a user's authentication directory.
Published: 2012-09-28T17:00:00.000Z
Updated: 2024-09-16T22:24:48.721Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3491 vulnerable 2026-06-08 05:02:10.186872 Details available
src/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle jobs via unspecified vectors.
Published: 2012-09-28T17:00:00.000Z
Updated: 2024-09-16T23:55:46.109Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4930 vulnerable 2026-06-08 04:59:33.914940 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.