Description
Stack-based buffer overflow in the condor_ schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.
Affected products
- condor_project / condor7.0.4
- condor_project / condor6.8.0 – 6.8.0
- condor_project / condor6.8.1 – 6.8.1
- condor_project / condor6.8.2 – 6.8.2
- condor_project / condor6.8.3 – 6.8.3
- condor_project / condor6.8.4 – 6.8.4
- condor_project / condor6.8.5 – 6.8.5
- condor_project / condor6.8.6 – 6.8.6
- condor_project / condor6.8.7 – 6.8.7
- condor_project / condor6.8.8 – 6.8.8
- condor_project / condor6.8.9 – 6.8.9
- condor_project / condor7.0.0 – 7.0.0
- condor_project / condor7.0.1 – 7.0.1
- condor_project / condor7.0.2 – 7.0.2
- condor_project / condor7.0.3 – 7.0.3
References
- MISChttp://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#SECTION00931000000000000000
- MISChttp://www.securitytracker.com/id?1021002
- MISChttp://www.redhat.com/support/errata/RHSA-2008-0924.html
- VENDOR_ADVISORYhttp://secunia.com/advisories/32232
- VENDOR_ADVISORYhttp://secunia.com/advisories/32189
- MISChttp://www.securityfocus.com/bid/31621
- MISChttps://www.redhat.com/archives/fedora-package-announce/2008-October/msg00264.html
- VENDOR_ADVISORYhttp://secunia.com/advisories/32193
- MISChttp://www.redhat.com/support/errata/RHSA-2008-0911.html
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2008/2760