CVE-2008-3828

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-10-08 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the condor_ schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.

Affected products

Condor Project Condor: through 7.0.4; 6.8.0, 6.8.1, 6.8.2, 6.8.3, 6.8.4, 6.8.5 (+8)

References

http://secunia.com/advisories/32189
http://secunia.com/advisories/32193
http://secunia.com/advisories/32232
http://www.cs.wisc.edu/condor/manual/v7.0/8_3Stable_Release.html#SECTION00931000000000000000
http://www.redhat.com/support/errata/RHSA-2008-0911.html
http://www.redhat.com/support/errata/RHSA-2008-0924.html
http://www.securityfocus.com/bid/31621
http://www.securitytracker.com/id?1021002
http://www.vupen.com/english/advisories/2008/2760
https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00264.html
http://secunia.com/advisories/32189
http://secunia.com/advisories/32193

Get alerted when CVE-2008-3828 or the next vulnerability affects your stack