CVE-2009-5136

The policy definition evaluator in Condor before 7.4.2 does not properly handle attributes in a WANT_SUSPEND policy that evaluate to an UNDEFINED state, which allows remote authenticated users to cause a denial of service (condor_startd exit) via a crafted job.

🔗 References (8)

• cve@mitrehttp://research.cs.wisc.edu/htcondor/manual/v7.6/8_5Stable_Release.html
• cve@mitrehttp://rhn.redhat.com/errata/RHSA-2010-0773.html
• cve@mitrehttps://bugzilla.redhat.com/show_bug.cgi?id=540545
• cve@mitrehttps://htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1001
• af854a3a-2127-422b-91ae-364da2661108http://research.cs.wisc.edu/htcondor/manual/v7.6/8_5Stable_Release.html
• af854a3a-2127-422b-91ae-364da2661108http://rhn.redhat.com/errata/RHSA-2010-0773.html
• af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=540545
• af854a3a-2127-422b-91ae-364da2661108https://htcondor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1001