{"id":"CVE-2011-4930","aliases":["EUVD-2011-4840","GHSA-xf2q-8pgg-943r","RHSA-2012:0099","RHSA-2012:0100"],"status":"published","title":"Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x...","description":"Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.","severity":{"version":"2.0","score":4.4,"vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00586,"percentile":0.48254,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-134"],"published":"2014-02-10T17:00:00Z","modified":"2026-06-28T10:05:44Z","fixes":[{"ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor","fixed_in":["0:7.6.5-0.12.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-classads","fixed_in":["0:7.6.5-0.12.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-debuginfo","fixed_in":["0:7.6.5-0.12.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-kbdd","fixed_in":["0:7.6.5-0.12.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-qmf","fixed_in":["0:7.6.5-0.12.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-vm-gahp","fixed_in":["0:7.6.5-0.12.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-wallaby-base-db","fixed_in":["0:1.19-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"ruby-spqr","fixed_in":["0:0.3.5-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"ruby-wallaby","fixed_in":["0:0.12.5-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"spqr-gen","fixed_in":["0:0.3.5-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"wallaby","fixed_in":["0:0.12.5-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"wallaby-utils","fixed_in":["0:0.12.5-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor","fixed_in":["0:7.6.5-0.12.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-aviary","fixed_in":["0:7.6.5-0.12.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-classads","fixed_in":["0:7.6.5-0.12.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-debuginfo","fixed_in":["0:7.6.5-0.12.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-ec2-enhanced","fixed_in":["0:1.3.0-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-ec2-enhanced-hooks","fixed_in":["0:1.3.0-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-kbdd","fixed_in":["0:7.6.5-0.12.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-plumage","fixed_in":["0:7.6.5-0.12.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-qmf","fixed_in":["0:7.6.5-0.12.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-vm-gahp","fixed_in":["0:7.6.5-0.12.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-wallaby-base-db","fixed_in":["0:1.19-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"cumin","fixed_in":["0:0.1.5192-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"python-condorec2e","fixed_in":["0:1.3.0-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"python-wallaby","fixed_in":["0:0.12.5-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"ruby-spqr","fixed_in":["0:0.3.5-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"ruby-wallaby","fixed_in":["0:0.12.5-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"spqr-gen","fixed_in":["0:0.3.5-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"wallaby","fixed_in":["0:0.12.5-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"wallaby-utils","fixed_in":["0:0.12.5-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor","fixed_in":["0:7.6.5-0.12.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-aviary","fixed_in":["0:7.6.5-0.12.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-classads","fixed_in":["0:7.6.5-0.12.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-debuginfo","fixed_in":["0:7.6.5-0.12.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-ec2-enhanced","fixed_in":["0:1.3.0-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-ec2-enhanced-hooks","fixed_in":["0:1.3.0-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-kbdd","fixed_in":["0:7.6.5-0.12.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-qmf","fixed_in":["0:7.6.5-0.12.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-vm-gahp","fixed_in":["0:7.6.5-0.12.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-wallaby-base-db","fixed_in":["0:1.19-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"cumin","fixed_in":["0:0.1.5192-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-condorec2e","fixed_in":["0:1.3.0-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-wallaby","fixed_in":["0:0.12.5-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"ruby-spqr","fixed_in":["0:0.3.5-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"ruby-wallaby","fixed_in":["0:0.12.5-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"spqr-gen","fixed_in":["0:0.3.5-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"wallaby","fixed_in":["0:0.12.5-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"wallaby-utils","fixed_in":["0:0.12.5-1.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-psycopg2","fixed_in":["0:2.0.14-3.el5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-psycopg2-debuginfo","fixed_in":["0:2.0.14-3.el5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.12.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-classads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.12.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.12.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-kbdd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.12.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.12.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-vm-gahp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.12.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"condor-wallaby-base-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"ruby-spqr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.5-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"ruby-wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"spqr-gen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.5-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:computenode:el6","package":"wallaby-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.12.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-aviary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.12.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-classads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.12.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.12.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-ec2-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-ec2-enhanced-hooks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-kbdd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.12.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-plumage","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.12.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.12.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-vm-gahp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.12.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"condor-wallaby-base-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"cumin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.5192-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"python-condorec2e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"python-wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"ruby-spqr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.5-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"ruby-wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"spqr-gen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.5-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2:server:el6","package":"wallaby-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.12.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-aviary","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.12.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-classads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.12.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.12.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-ec2-enhanced","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-ec2-enhanced-hooks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-kbdd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.12.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-qmf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.12.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-vm-gahp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.6.5-0.12.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"condor-wallaby-base-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"cumin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.5192-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-condorec2e","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"ruby-spqr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.5-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"ruby-wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"spqr-gen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.5-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"wallaby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"wallaby-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.5-1.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-psycopg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-3.el5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_mrg:2::el5","package":"python-psycopg2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-3.el5"}]}]}],"products":[{"vendor":"condor_project","product":"condor"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"redhat","product":"enterprise_mrg"}],"references":[{"url":"http://research.cs.wisc.edu/htcondor/security/vulnerabilities/CONDOR-2012-0001.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=759548","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://htcondor-wiki.cs.wisc.edu/index.cgi/chngview?cn=28429","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0099.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://htcondor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdiff%3Bh=5e5571d1a431eb3c61977b6dd6ec90186ef79867","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=2660","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://htcondor-wiki.cs.wisc.edu/index.cgi/chngview?cn=28264","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2012-0100.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4930","tags":["advisory"]},{"url":"https://htcondor-git.cs.wisc.edu/?p=condor.git;a=commitdiff;h=5e5571d1a431eb3c61977b6dd6ec90186ef79867"},{"url":"https://github.com/advisories/GHSA-xf2q-8pgg-943r"},{"url":"https://access.redhat.com/errata/RHSA-2012:0099","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/index.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=765607","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0099.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-4930","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-4930","tags":["advisory"]},{"url":"http://research.cs.wisc.edu/condor/security/vulnerabilities/CONDOR-2012-0001.html","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2012:0100","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=613931","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=748735","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=750063","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=751072","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=751779","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=751834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=752322","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=753829","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=754202","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=756401","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=756402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=759154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=759200","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=759433","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=761165","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=761588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=765713","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=765846","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=771642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=773680","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=782485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=782902","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0100.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2011-4930","description":"Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.","status":"published","published":"2014-02-10T17:00:00Z","modified":"2024-08-07T00:23:38.555Z","updated_at":"2026-11-02T14:35:37.989579Z"}],"euvd":[{"id":"EUVD-2011-4840","description":"Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.","status":"published","published":"2014-02-10T17:00:00Z","modified":"2024-08-07T00:23:38Z","updated_at":"2026-11-03T01:39:48.106738Z"}],"ghsa":[{"id":"GHSA-xf2q-8pgg-943r","title":"Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x...","description":"Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.","status":"published","published":"2022-05-13T01:08:39Z","modified":"2023-02-13T03:30:23Z","cwes":["CWE-134"],"updated_at":"2026-11-02T14:54:05.462623Z"}],"nvd":[{"id":"CVE-2011-4930","description":"Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.","status":"published","published":"2014-02-10T18:15:09.31Z","modified":"2026-06-16T23:35:39.003Z","cvss":[{"version":"2.0","score":4.4,"vector":"AV:L/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-134"],"updated_at":"2026-11-02T14:02:12.639283Z"}],"osv":[{"id":"RHSA-2012:0099","title":"Red Hat Security Advisory: MRG Grid security, bug fix, and enhancement update","status":"published","published":"2024-09-13T07:08:26Z","modified":"2026-06-28T10:05:43Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2012:0100","title":"Red Hat Security Advisory: MRG Grid security, bug fix, and enhancement update","status":"published","published":"2024-09-13T07:08:30Z","modified":"2026-06-28T10:05:44Z","updated_at":"2026-11-02T15:53:01.495018Z"}]}}