Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2008-3830

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Condor（现称HTCondor）是美国威斯康星大学麦迪逊分校所开发的一套用来管理计算密集型任务的批处理队列系统。该系统是通过一个高吞吐量的计算（HTC）环境实现的，并提供任务队列机制、调度策略等功能。 Condor处理访问控制的允许和拒绝子网掩码的方式存在漏洞，如果配置文件的允许或拒绝规则中包含有重复的子网掩码的话，就会导致忽略该规则，允许非预期的访问。

AI Predicted 8.1 Difficulty: Easy EPSS 0.39% · P32
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2008-3830

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Condor before 7.0.5 does not properly handle when the configuration specifies overlapping netmasks in allow or deny rules, which causes the rule to be ignored and allows attackers to bypass intended access restrictions.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Condor 允许和拒绝子网掩码的方式非法访问漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Condor（现称HTCondor）是美国威斯康星大学麦迪逊分校所开发的一套用来管理计算密集型任务的批处理队列系统。该系统是通过一个高吞吐量的计算（HTC）环境实现的，并提供任务队列机制、调度策略等功能。 Condor处理访问控制的允许和拒绝子网掩码的方式存在漏洞，如果配置文件的允许或拒绝规则中包含有重复的子网掩码的话，就会导致忽略该规则，允许非预期的访问。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2008-3830

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-3830

请登录查看更多情报信息。

Vendor Advisories for CVE-2008-3830 (6)

Other References for CVE-2008-3830 (4)

Same Patch Batch · n/a · 2008-10-08 · 27 CVEs total

CVE-2008-4493 microsoft digital_image ’PipPPush.DLL’ 输入验证错误漏洞
CVE-2008-4490 phpAbook Cookie 'config.inc.php' 本地文件包含漏洞
CVE-2008-4489 Atarone CMS 'ap-save.php' 路径遍历漏洞
CVE-2008-4488 Atarone CMS 'ap-pages.php' 跨站脚本攻击漏洞
CVE-2008-4487 Atarone CMS 'ap-save.php' SQL注入漏洞
CVE-2008-4486 yerba 'SAC.php' 目录遍历漏洞
CVE-2008-4485 Blue Coat WebFilter ICAP Patience 页跨站脚本攻击漏洞
CVE-2008-4484 Crux Gallery 'main.php ' Cookie 权限绕过漏洞
CVE-2008-4483 crux software gallery 'index.php' 目录遍历漏洞
CVE-2008-4482 Xerces-C++ 'maxOccurs' XML 解析远程拒绝服务漏洞
CVE-2008-4481 Redmine 未明跨站脚本攻击漏洞
CVE-2008-4492 yourownbux 'referrals.php' SQL注入漏洞
CVE-2008-4491 Apple Mail S/MIME明文存储邮件漏洞
CVE-2008-4494 TorrentTrader Classic 'completed-advance.php' SQL注入漏洞
CVE-2008-3829 Condor 'condor_schedd' 存在拒绝服务漏洞
CVE-2008-3828 Condor 'condor_schedd'存在堆栈溢出漏洞
CVE-2008-3826 Condor 处理用户提交任务安全漏洞
CVE-2008-3814 Cisco Unity远程管理绕过认证漏洞
CVE-2008-4502 datafeedfile dff_framework_api 多个PHP远程文件存在代码注入漏洞
CVE-2008-4501 SolarWinds Serv-U File Server 路径遍历漏洞

Showing top 20 of 27 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2008-3830

No comments yet

Leave a comment