Some vulnerabilities have been reported Condor, which can be exploited by malicious users to bypass certain security restrictions, cause a DoS (Denial of Service), and potentially compromise a vulnerable system, and by malicious people to bypass certain security restrictions.

1) An unspecified error within the handling of submitted jobs can be exploited to run tasks as any non-root user.

2) An unspecified boundary error within the "condor_schedd" daemon can be exploited to cause a stack-based buffer overflow and potentially execute arbitrary code.

3) An unspecified error within the "condor_schedd" daemon can be exploited to crash the service.

Successful exploitation of the above vulnerabilities requires the permission to submit jobs.

4) An error exists within the processing of allow and deny access control netmasks. This may result in access rules being ignored for certain overlapping netmasks, potentially allowing unauthorised access.

Successful exploitation of the above vulnerabilities requires the permission to submit jobs.

Solution
Update to version 7.0.5.

Provided and/or discovered by
Reported by the vendor.

Original Advisory
Condor 7.0.5 Release Notes:
http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#SECTION00931000000000000000

Deep Links
Links available to Secunia VIM customers