Description
Condor before 7.0.5 does not properly handle when the configuration specifies overlapping netmasks in allow or deny rules, which causes the rule to be ignored and allows attackers to bypass intended access restrictions.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat MRG 1 | condor +1 | 7.0.5-2.el4 | RHSA-2008:0924, RHSA-2008:0911 |
Advisories 2
- RHSA-2008:0924 Red Hat Security Advisory: condor security, bug fix and enhancement update Red Hat Security Advisories (RHSA) · Nov 22, 2025
- RHSA-2008:0911 Red Hat Security Advisory: condor security, bug fix and enhancement update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#SECTION00931000000000000000
- 1021002 vdb-entry
- RHSA-2008:0924 vendor-advisory
- 32232 third-party-advisory
- 32189 third-party-advisory
- 31621 vdb-entry
- FEDORA-2008-8733 vendor-advisory
- 32193 third-party-advisory
- RHSA-2008:0911 vendor-advisory
- ADV-2008-2760 vdb-entry