Every CVESearch/Get API key

CVE-2012-3416

Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute...

10.0 HighFix available

CVE-2012-3416 is a high vulnerability (CVSS 10.0) in Condor Project Condor, published August 25, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.10%, the 92nd percentile. Fixed in condor 7.8.2~dfsg.1-1.

What does this mean?
Severity
10.0 HighCVSS 2.0, NVD
Exploit chance
5.10%EPSS, 92nd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
7.8.2~dfsg.1-1condor +23 more

Description

Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.

Exploit likelihood

5.10%Up 3.1 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
condor
Debian:13
before 7.8.2~dfsg.1-1
7.8.2~dfsg.1-1
condor
Debian:14
before 7.8.2~dfsg.1-1
7.8.2~dfsg.1-1
condor
Red Hat:enterprise_mrg:2::el5
before 0:7.6.5-0.14.2.el5
0:7.6.5-0.14.2.el5
condor-aviary
Red Hat:enterprise_mrg:2::el5
before 0:7.6.5-0.14.2.el5
0:7.6.5-0.14.2.el5
condor-classads
Red Hat:enterprise_mrg:2::el5
before 0:7.6.5-0.14.2.el5
0:7.6.5-0.14.2.el5
condor-debuginfo
Red Hat:enterprise_mrg:2::el5
before 0:7.6.5-0.14.2.el5
0:7.6.5-0.14.2.el5
condor-kbdd
Red Hat:enterprise_mrg:2::el5
before 0:7.6.5-0.14.2.el5
0:7.6.5-0.14.2.el5
condor-qmf
Red Hat:enterprise_mrg:2::el5
before 0:7.6.5-0.14.2.el5
0:7.6.5-0.14.2.el5
condor-vm-gahp
Red Hat:enterprise_mrg:2::el5
before 0:7.6.5-0.14.2.el5
0:7.6.5-0.14.2.el5
condor
Red Hat:enterprise_mrg:2:computenode:el6
before 0:7.6.5-0.14.2.el6_3
0:7.6.5-0.14.2.el6_3
Show 14 moreShow less
Affected packages
PackageAffectedFixed
condor-classads
Red Hat:enterprise_mrg:2:computenode:el6
before 0:7.6.5-0.14.2.el6_3
0:7.6.5-0.14.2.el6_3
condor-debuginfo
Red Hat:enterprise_mrg:2:computenode:el6
before 0:7.6.5-0.14.2.el6_3
0:7.6.5-0.14.2.el6_3
condor-kbdd
Red Hat:enterprise_mrg:2:computenode:el6
before 0:7.6.5-0.14.2.el6_3
0:7.6.5-0.14.2.el6_3
condor-qmf
Red Hat:enterprise_mrg:2:computenode:el6
before 0:7.6.5-0.14.2.el6_3
0:7.6.5-0.14.2.el6_3
condor-vm-gahp
Red Hat:enterprise_mrg:2:computenode:el6
before 0:7.6.5-0.14.2.el6_3
0:7.6.5-0.14.2.el6_3
condor
Red Hat:enterprise_mrg:2:server:el6
before 0:7.6.5-0.14.2.el6_3
0:7.6.5-0.14.2.el6_3
condor-aviary
Red Hat:enterprise_mrg:2:server:el6
before 0:7.6.5-0.14.2.el6_3
0:7.6.5-0.14.2.el6_3
condor-classads
Red Hat:enterprise_mrg:2:server:el6
before 0:7.6.5-0.14.2.el6_3
0:7.6.5-0.14.2.el6_3
condor-debuginfo
Red Hat:enterprise_mrg:2:server:el6
before 0:7.6.5-0.14.2.el6_3
0:7.6.5-0.14.2.el6_3
condor-deltacloud-gahp
Red Hat:enterprise_mrg:2:server:el6
before 0:7.6.5-0.14.2.el6_3
0:7.6.5-0.14.2.el6_3
condor-kbdd
Red Hat:enterprise_mrg:2:server:el6
before 0:7.6.5-0.14.2.el6_3
0:7.6.5-0.14.2.el6_3
condor-plumage
Red Hat:enterprise_mrg:2:server:el6
before 0:7.6.5-0.14.2.el6_3
0:7.6.5-0.14.2.el6_3
condor-qmf
Red Hat:enterprise_mrg:2:server:el6
before 0:7.6.5-0.14.2.el6_3
0:7.6.5-0.14.2.el6_3
condor-vm-gahp
Red Hat:enterprise_mrg:2:server:el6
before 0:7.6.5-0.14.2.el6_3
0:7.6.5-0.14.2.el6_3

What each source reports

NVD Score used10.0

Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.

Record
CVE-2012-3416
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-287
Updated
2026-11-02
CVE ListNo score

Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.

Record
CVE-2012-3416
Updated
2026-11-02
EUVDEUVD-2012-3386No score

Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.

Record
EUVD-2012-3386
Updated
2026-11-03
GitHub AdvisoriesGHSA-g6rg-4rx4-gw4mNo score

Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute...

Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.

Record
GHSA-g6rg-4rx4-gw4m
Weakness
CWE-287
Updated
2026-11-02
OSVNo score

Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.

Record
CVE-2012-3416
Updated
2026-11-02
OSVDEBIAN-CVE-2012-3416No score

Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.

Record
DEBIAN-CVE-2012-3416
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 14 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open