CVE-2012-3491

src/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle jobs via unspecified vectors.

• CWE-264

• http://condor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdiff%3Bh=1fff5d40
• http://research.cs.wisc.edu/condor/manual/v7.6/8_3Stable_Release.html
• http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html
• http://rhn.redhat.com/errata/RHSA-2012-1278.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1281.htmlVendor Advisory
• http://secunia.com/advisories/50666Vendor Advisory
• http://www.openwall.com/lists/oss-security/2012/09/20/9
• http://www.securityfocus.com/bid/55632
• https://bugzilla.redhat.com/show_bug.cgi?id=848214
• http://condor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdiff%3Bh=1fff5d40
• http://research.cs.wisc.edu/condor/manual/v7.6/8_3Stable_Release.html
• http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html
• http://rhn.redhat.com/errata/RHSA-2012-1278.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1281.htmlVendor Advisory
• http://secunia.com/advisories/50666Vendor Advisory
• http://www.openwall.com/lists/oss-security/2012/09/20/9
• http://www.securityfocus.com/bid/55632
• https://bugzilla.redhat.com/show_bug.cgi?id=848214

Published

Sep 28, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-3485Tunnelblick 3.3beta20 and earlier relies on argv[0] to deter…
• CVE-2012-3486Tunnelblick 3.3beta20 and earlier allows local users to gain…
• CVE-2012-3487Race condition in Tunnelblick 3.3beta20 and earlier allows l…
• CVE-2012-3488The libxslt support in contrib/xml2 in PostgreSQL 8.3 before…
• CVE-2012-3489The xml_parse function in the libxml2 support in the core se…6.5
• CVE-2012-3490The (1) my_popenv_impl and (2) my_spawnv functions in src/co…8.8
• CVE-2012-3492The filesystem authentication (condor_io/condor_auth_fs.cpp)…
• CVE-2012-3493The command_give_request_ad function in condor_startd.V6/com…
• CVE-2012-3494The set_debugreg hypercall in include/asm-x86/debugreg.h in …
• CVE-2012-3495The physdev_get_free_pirq hypercall in arch/x86/physdev.c in…
• CVE-2012-3496XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix…
• CVE-2012-3497(1) TMEMC_SAVE_GET_CLIENT_WEIGHT, (2) TMEMC_SAVE_GET_CLIENT_…