Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2014-02-10T17:00:00
Updated: 2024-08-07T00:23:38.555Z
Reserved: 2011-12-23T00:00:00
Link: CVE-2011-4930
Vulnrichment
No data.
NVD
Status : Modified
Published: 2014-02-10T18:15:09.310
Modified: 2024-11-21T01:33:19.287
Link: CVE-2011-4930
Redhat