CVE-2012-3493

The command_give_request_ad function in condor_startd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the condor_startd port, which leaks the ClaimId.

• CWE-200

• http://condor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdiff%3Bh=d2f33972
• http://research.cs.wisc.edu/condor/manual/v7.6/8_3Stable_Release.html
• http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html
• http://rhn.redhat.com/errata/RHSA-2012-1278.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1281.htmlVendor Advisory
• http://secunia.com/advisories/50666Vendor Advisory
• http://www.openwall.com/lists/oss-security/2012/09/20/9
• http://www.securityfocus.com/bid/55632
• https://bugzilla.redhat.com/show_bug.cgi?id=848222
• http://condor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdiff%3Bh=d2f33972
• http://research.cs.wisc.edu/condor/manual/v7.6/8_3Stable_Release.html
• http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html
• http://rhn.redhat.com/errata/RHSA-2012-1278.htmlVendor Advisory
• http://rhn.redhat.com/errata/RHSA-2012-1281.htmlVendor Advisory
• http://secunia.com/advisories/50666Vendor Advisory
• http://www.openwall.com/lists/oss-security/2012/09/20/9
• http://www.securityfocus.com/bid/55632
• https://bugzilla.redhat.com/show_bug.cgi?id=848222

Published

Sep 28, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-3487Race condition in Tunnelblick 3.3beta20 and earlier allows l…
• CVE-2012-3488The libxslt support in contrib/xml2 in PostgreSQL 8.3 before…
• CVE-2012-3489The xml_parse function in the libxml2 support in the core se…6.5
• CVE-2012-3490The (1) my_popenv_impl and (2) my_spawnv functions in src/co…8.8
• CVE-2012-3491src/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.1…
• CVE-2012-3492The filesystem authentication (condor_io/condor_auth_fs.cpp)…
• CVE-2012-3494The set_debugreg hypercall in include/asm-x86/debugreg.h in …
• CVE-2012-3495The physdev_get_free_pirq hypercall in arch/x86/physdev.c in…
• CVE-2012-3496XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix…
• CVE-2012-3497(1) TMEMC_SAVE_GET_CLIENT_WEIGHT, (2) TMEMC_SAVE_GET_CLIENT_…
• CVE-2012-3498PHYSDEVOP_map_pirq in Xen 4.1 and 4.2 and Citrix XenServer 6…
• CVE-2012-3499Multiple cross-site scripting (XSS) vulnerabilities in the A…