CVE-2008-3424
Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE,...
CVE-2008-3424 is a high vulnerability (CVSS 7.5) in Condor Project Condor, published July 31, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.65%, the 85th percentile. Fixed in condor 0:7.0.4-4.el5.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 2.65%EPSS, 85th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0:7.0.4-4.el5condor +5 more
Description
Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRITE configuration variables in authorization policy lists, which might allow remote attackers to bypass intended access restrictions.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
condorRed Hat:enterprise_mrg:1::el5 | before 0:7.0.4-4.el5 | 0:7.0.4-4.el5 |
condor-debuginfoRed Hat:enterprise_mrg:1::el5 | before 0:7.0.4-4.el5 | 0:7.0.4-4.el5 |
condor-staticRed Hat:enterprise_mrg:1::el5 | before 0:7.0.4-4.el5 | 0:7.0.4-4.el5 |
condorRed Hat:enterprise_mrg:1.0::el4 | before 0:7.0.4-4.el4 | 0:7.0.4-4.el4 |
condor-debuginfoRed Hat:enterprise_mrg:1.0::el4 | before 0:7.0.4-4.el4 | 0:7.0.4-4.el4 |
condor-staticRed Hat:enterprise_mrg:1.0::el4 | before 0:7.0.4-4.el4 | 0:7.0.4-4.el4 |
What each source reports
NVD Score used
Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRITE configuration variables in authorization policy lists, which might allow remote attackers to bypass intended access restrictions.
- Record
CVE-2008-3424- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-863
- Updated
- 2026-11-02
CVE ListNo score
Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRITE configuration variables in authorization policy lists, which might allow remote attackers to bypass intended access restrictions.
- Record
CVE-2008-3424- Updated
- 2026-11-02
EUVDEUVD-2008-3410No score
Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRITE configuration variables in authorization policy lists, which might allow remote attackers to bypass intended access restrictions.
- Record
EUVD-2008-3410- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q7rw-ph4p-r6chNo score
Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE,...
Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRITE configuration variables in authorization policy lists, which might allow remote attackers to bypass intended access restrictions.
- Record
GHSA-q7rw-ph4p-r6ch- Weakness
- CWE-863
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/31423
redhat.com/support/errata/RHSA-2008-0816.html
exchange.xforce.ibmcloud.com/vulnerabilities/44063
securitytracker.com/id?1020646
Show 30 moreShow less
cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html
securityfocus.com/bid/30440
nvd.nist.gov/vuln/detail/CVE-2008-3424
github.com/advisories/GHSA-q7rw-ph4p-r6ch
access.redhat.com/errata/RHSA-2008:0814
bugzilla.redhat.com/show_bug.cgi?id=447830
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0814.json
cve.org/CVERecord?id=CVE-2008-3424