Test ID:	1.3.6.1.4.1.25623.1.0.66541
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2009:1688
Summary:	The remote host is missing updates announced in;advisory RHSA-2009:1688.;;Condor is a specialized workload management system for compute-intensive;jobs. It provides a job queuing mechanism, scheduling policy, priority;scheme, and resource monitoring and management.;;A flaw was found in the way Condor managed jobs. This could allow a user;that is authorized to submit jobs into Condor to queue a job as if it were;submitted by a different local user, potentially leading to unauthorized;access to that user's account. (CVE-2009-4133);;Note: Condor will not run jobs as root. Therefore, this flaw cannot lead to;a compromise of the root user account.;;All Red Hat Enterprise MRG 1.2 users are advised to upgrade to these;updated packages, which contain a backported patch to correct this issue.;Condor must be restarted for the update to take effect.
Description:	Summary: The remote host is missing updates announced in advisory RHSA-2009:1688. Condor is a specialized workload management system for compute-intensive jobs. It provides a job queuing mechanism, scheduling policy, priority scheme, and resource monitoring and management. A flaw was found in the way Condor managed jobs. This could allow a user that is authorized to submit jobs into Condor to queue a job as if it were submitted by a different local user, potentially leading to unauthorized access to that user's account. (CVE-2009-4133) Note: Condor will not run jobs as root. Therefore, this flaw cannot lead to a compromise of the root user account. All Red Hat Enterprise MRG 1.2 users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. Condor must be restarted for the update to take effect. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-4133 BugTraq ID: 37443 http://www.securityfocus.com/bid/37443 http://condor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1018 http://www.redhat.com/support/errata/RHSA-2009-1688.html http://www.redhat.com/support/errata/RHSA-2009-1689.html http://securitytracker.com/id?1023378 http://secunia.com/advisories/37766 http://secunia.com/advisories/37803 XForce ISS Database: condor-jobs-security-bypass(54984) https://exchange.xforce.ibmcloud.com/vulnerabilities/54984
Copyright	Copyright (C) 2009 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.