{"id":"CVE-2008-3424","aliases":["EUVD-2008-3410","GHSA-q7rw-ph4p-r6ch","RHSA-2008:0814","RHSA-2008:0816"],"status":"published","title":"Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE,...","description":"Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRITE configuration variables in authorization policy lists, which might allow remote attackers to bypass intended access restrictions.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02651,"percentile":0.85719,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-863"],"published":"2008-07-31T22:00:00Z","modified":"2026-06-16T22:55:48Z","fixes":[{"ecosystem":"Red Hat:enterprise_mrg:1::el5","package":"condor","fixed_in":["0:7.0.4-4.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:1::el5","package":"condor-debuginfo","fixed_in":["0:7.0.4-4.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:1::el5","package":"condor-static","fixed_in":["0:7.0.4-4.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:1.0::el4","package":"condor","fixed_in":["0:7.0.4-4.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:1.0::el4","package":"condor-debuginfo","fixed_in":["0:7.0.4-4.el4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:1.0::el4","package":"condor-static","fixed_in":["0:7.0.4-4.el4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:1::el5","package":"condor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.4-4.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:1::el5","package":"condor-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.4-4.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:1::el5","package":"condor-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.4-4.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:1.0::el4","package":"condor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.4-4.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:1.0::el4","package":"condor-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.4-4.el4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:1.0::el4","package":"condor-static","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.4-4.el4"}]}]}],"products":[{"vendor":"condor_project","product":"condor"},{"vendor":"fedoraproject","product":"fedora"}],"references":[{"url":"http://secunia.com/advisories/31423","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0816.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/31459","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-August/msg00252.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Mailing List"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/44063","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1020646","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#sec:New-7-0-4","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"http://www.securityfocus.com/bid/30440","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/31284","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0814.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3424","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-q7rw-ph4p-r6ch"},{"url":"https://access.redhat.com/errata/RHSA-2008:0814","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=447830","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=449043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=452512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=452515","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=455338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=456080","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=456478","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457372","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0814.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2008-3424","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-3424","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2008:0816","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457265","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457267","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457268","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457269","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457271","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=457272","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0816.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2008-3424","description":"Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRITE configuration variables in authorization policy lists, which might allow remote attackers to bypass intended access restrictions.","status":"published","published":"2008-07-31T22:00:00Z","modified":"2024-08-07T09:37:26.835Z","updated_at":"2026-11-02T14:34:45.504702Z"}],"euvd":[{"id":"EUVD-2008-3410","description":"Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRITE configuration variables in authorization policy lists, which might allow remote attackers to bypass intended access restrictions.","status":"published","published":"2008-07-31T22:00:00Z","modified":"2024-08-07T09:37:26Z","updated_at":"2026-11-03T01:38:52.249298Z"}],"ghsa":[{"id":"GHSA-q7rw-ph4p-r6ch","title":"Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE,...","description":"Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRITE configuration variables in authorization policy lists, which might allow remote attackers to bypass intended access restrictions.","status":"published","published":"2022-05-02T00:00:05Z","modified":"2024-01-12T21:30:17Z","cwes":["CWE-863"],"updated_at":"2026-11-02T14:55:24.514817Z"}],"nvd":[{"id":"CVE-2008-3424","description":"Condor before 7.0.4 does not properly handle wildcards in the ALLOW_WRITE, DENY_WRITE, HOSTALLOW_WRITE, or HOSTDENY_WRITE configuration variables in authorization policy lists, which might allow remote attackers to bypass intended access restrictions.","status":"published","published":"2008-07-31T22:41:00Z","modified":"2026-06-16T22:55:48.193Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-863"],"updated_at":"2026-11-02T14:01:27.800088Z"}],"osv":[{"id":"RHSA-2008:0814","title":"Red Hat Security Advisory: condor security and bug fix update","status":"published","published":"2024-09-13T06:24:22Z","modified":"2025-11-22T10:17:49Z","updated_at":"2026-11-02T15:52:59.70892Z"},{"id":"RHSA-2008:0816","title":"Red Hat Security Advisory: condor security and bug fix update","status":"published","published":"2024-09-13T06:24:26Z","modified":"2025-11-22T10:17:50Z","updated_at":"2026-11-02T15:52:59.70892Z"}]}}