Every CVE Search/ Get API key

CVE-2009-4133

Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node...

6.5 MediumFix available

Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute.

Exploit likelihood

2.08%Up 0.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.5

Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute.

Record
CVE-2009-4133
CVSS 2.0
6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute.

Record
CVE-2009-4133
Updated
2026-11-02
EUVDEUVD-2009-4103 No score

Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute.

Record
EUVD-2009-4103
Updated
2026-11-03
GitHub AdvisoriesGHSA-4crj-cmpw-2wrg No score

Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node...

Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute.

Record
GHSA-4crj-cmpw-2wrg
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
condor
Red Hat:enterprise_mrg:1.0::el4
 before 0:7.4.1-0.7.1.el4
0:7.4.1-0.7.1.el4
condor-debuginfo
Red Hat:enterprise_mrg:1.0::el4
 before 0:7.4.1-0.7.1.el4
0:7.4.1-0.7.1.el4
condor-kbdd
Red Hat:enterprise_mrg:1.0::el4
 before 0:7.4.1-0.7.1.el4
0:7.4.1-0.7.1.el4
condor-qmf-plugins
Red Hat:enterprise_mrg:1.0::el4
 before 0:7.4.1-0.7.1.el4
0:7.4.1-0.7.1.el4
condor
Red Hat:enterprise_mrg:1::el5
 before 0:7.4.1-0.7.1.el5
0:7.4.1-0.7.1.el5
condor-debuginfo
Red Hat:enterprise_mrg:1::el5
 before 0:7.4.1-0.7.1.el5
0:7.4.1-0.7.1.el5
condor-kbdd
Red Hat:enterprise_mrg:1::el5
 before 0:7.4.1-0.7.1.el5
0:7.4.1-0.7.1.el5
condor-qmf-plugins
Red Hat:enterprise_mrg:1::el5
 before 0:7.4.1-0.7.1.el5
0:7.4.1-0.7.1.el5
condor-vm-gahp
Red Hat:enterprise_mrg:1::el5
 before 0:7.4.1-0.7.1.el5
0:7.4.1-0.7.1.el5

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-4133 is a medium vulnerability (CVSS 6.5) in Condor Project Condor, published December 23, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.08%, the 81st percentile. Fixed in condor 0:7.4.1-0.7.1.el4.

References

Show 14 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open