CVE-2012-3416
Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute...
Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.
Exploit likelihood
What each source reports
NVD Score used
Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.
- Record
CVE-2012-3416- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.
- Record
CVE-2012-3416- Updated
- 2026-11-02
EUVDEUVD-2012-3386 No score
Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.
- Record
EUVD-2012-3386- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g6rg-4rx4-gw4m No score
Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute...
Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.
- Record
GHSA-g6rg-4rx4-gw4m- Weakness
- CWE-287
- Updated
- 2026-11-02
OSV No score
Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.
- Record
CVE-2012-3416- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-3416 No score
Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.
- Record
DEBIAN-CVE-2012-3416- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
condorDebian:13 |
before 7.8.2~dfsg.1-1 | 7.8.2~dfsg.1-1 |
condorDebian:14 |
before 7.8.2~dfsg.1-1 | 7.8.2~dfsg.1-1 |
condorRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.5-0.14.2.el5 | 0:7.6.5-0.14.2.el5 |
condor-aviaryRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.5-0.14.2.el5 | 0:7.6.5-0.14.2.el5 |
condor-classadsRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.5-0.14.2.el5 | 0:7.6.5-0.14.2.el5 |
condor-debuginfoRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.5-0.14.2.el5 | 0:7.6.5-0.14.2.el5 |
condor-kbddRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.5-0.14.2.el5 | 0:7.6.5-0.14.2.el5 |
condor-qmfRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.5-0.14.2.el5 | 0:7.6.5-0.14.2.el5 |
condor-vm-gahpRed Hat:enterprise_mrg:2::el5 |
before 0:7.6.5-0.14.2.el5 | 0:7.6.5-0.14.2.el5 |
condorRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.5-0.14.2.el6_3 | 0:7.6.5-0.14.2.el6_3 |
Show 14 moreShow less
| Package | Affected | Fixed |
|---|---|---|
condor-classadsRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.5-0.14.2.el6_3 | 0:7.6.5-0.14.2.el6_3 |
condor-debuginfoRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.5-0.14.2.el6_3 | 0:7.6.5-0.14.2.el6_3 |
condor-kbddRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.5-0.14.2.el6_3 | 0:7.6.5-0.14.2.el6_3 |
condor-qmfRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.5-0.14.2.el6_3 | 0:7.6.5-0.14.2.el6_3 |
condor-vm-gahpRed Hat:enterprise_mrg:2:computenode:el6 |
before 0:7.6.5-0.14.2.el6_3 | 0:7.6.5-0.14.2.el6_3 |
condorRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.14.2.el6_3 | 0:7.6.5-0.14.2.el6_3 |
condor-aviaryRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.14.2.el6_3 | 0:7.6.5-0.14.2.el6_3 |
condor-classadsRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.14.2.el6_3 | 0:7.6.5-0.14.2.el6_3 |
condor-debuginfoRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.14.2.el6_3 | 0:7.6.5-0.14.2.el6_3 |
condor-deltacloud-gahpRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.14.2.el6_3 | 0:7.6.5-0.14.2.el6_3 |
condor-kbddRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.14.2.el6_3 | 0:7.6.5-0.14.2.el6_3 |
condor-plumageRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.14.2.el6_3 | 0:7.6.5-0.14.2.el6_3 |
condor-qmfRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.14.2.el6_3 | 0:7.6.5-0.14.2.el6_3 |
condor-vm-gahpRed Hat:enterprise_mrg:2:server:el6 |
before 0:7.6.5-0.14.2.el6_3 | 0:7.6.5-0.14.2.el6_3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-3416 is a high vulnerability (CVSS 10.0) in Condor Project Condor, published August 25, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.10%, the 92nd percentile. Fixed in condor 7.8.2~dfsg.1-1.
References
exchange.xforce.ibmcloud.com/vulnerabilities/77748
rhn.redhat.com/errata/RHSA-2012-1168.html
securitytracker.com/id?1027395
osvdb.org/84766
secunia.com/advisories/50246
securityfocus.com/bid/55032
Show 14 moreShow less
research.cs.wisc.edu/condor/security/vulnerabilities/CONDOR-2012-0002.html
nvd.nist.gov/vuln/detail/CVE-2012-3416
access.redhat.com/errata/RHSA-2012:1168
bugzilla.redhat.com/show_bug.cgi?id=841175
github.com/advisories/GHSA-g6rg-4rx4-gw4m
security-tracker.debian.org/tracker/CVE-2012-3416
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1168.json
cve.org/CVERecord?id=CVE-2012-3416