The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2013-10-11T22:00:00Z

Updated: 2024-09-17T03:23:50.691Z

Reserved: 2013-10-11T00:00:00Z

Link: CVE-2009-5136

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2013-10-11T22:55:35.910

Modified: 2024-11-21T01:11:14.973

Link: CVE-2009-5136

cve-icon Redhat

No data.