CVE-2009-5136
Published Oct 11, 2013
Last updated 3 years ago
Overview
- Description
- The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 4
- Impact score
- 2.9
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- CWE-20
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:condor_project:condor:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ACDEB31F-4DF7-4639-A1E7-6BAAB4CA7303",
"versionEndIncluding": "7.4.1"
},
{
"criteria": "cpe:2.3:a:condor_project:condor:7.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B7AA2890-BEC9-4AD6-AF74-6EC810E22AEF"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:redhat:enterprise_mrg:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB4E172C-4FBD-40AA-91F1-2858A74C5483"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_mrg:1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E8A4D28-0EC4-4584-9126-A47003CD06AE"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_mrg:1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "12EE56E2-D7B7-4BF6-BC1F-86B8EE77F064"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_mrg:1.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F9A3A7B-4A61-4F2C-A8F9-D428B690294E"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_mrg:1.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73C6E954-7BBE-4214-9407-86322372FCB2"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_mrg:1.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED639614-7AE8-4DDE-9FE3-1554FE59202C"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_mrg:1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD09E081-B714-45A1-ACBB-28D805BFD01C"
},
{
"criteria": "cpe:2.3:o:redhat:enterprise_mrg:1.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FBC7F3E0-9E2A-4FBF-A4E5-9CCBC8D4C7CC"
}
],
"operator": "OR"
}
]
}
]