CVE-2009-4133

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-12-23 · updated 2026-06-16

Description

Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute.

Affected products

Condor Project Condor: 6.5.4, 6.8.0, 6.8.1, 6.8.2, 6.8.3, 6.8.4 (+26)
RedHat Enterprise Mrg: 1.2

References

http://condor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1018
http://secunia.com/advisories/37766
http://secunia.com/advisories/37803
http://securitytracker.com/id?1023378
http://www.cs.wisc.edu/condor/manual/v7.4/8_3Stable_Release.html#SECTION00931000000000000000
http://www.cs.wisc.edu/condor/security/vulnerabilities/CONDOR-2009-0001.html
http://www.redhat.com/support/errata/RHSA-2009-1688.html
http://www.redhat.com/support/errata/RHSA-2009-1689.html
http://www.securityfocus.com/bid/37443
https://bugzilla.redhat.com/show_bug.cgi?id=544371
https://exchange.xforce.ibmcloud.com/vulnerabilities/54984
http://condor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1018

Get alerted when CVE-2009-4133 or the next vulnerability affects your stack