Multiple format string vulnerabilities in Condor 7.2.0 through 7.6.4, and possibly certain 7.7.x versions, as used in Red Hat MRG Grid and possibly other products, allow local users to cause a denial of service (condor_schedd daemon and failure to launch jobs) and possibly execute arbitrary code via format string specifiers in (1) the reason for a hold for a job that uses an XML user log, (2) the filename of a file to be transferred, and possibly other unspecified vectors.

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0100 advisory.

    Red Hat Enterprise MRG (Messaging, Realtime, and Grid) is a next-generation     IT infrastructure for enterprise computing. MRG offers increased     performance, reliability, interoperability, and faster computing for     enterprise customers.

    MRG Grid provides high-throughput computing and enables enterprises to     achieve higher peak computing capacity as well as improved infrastructure     utilization by leveraging their existing technology to build high     performance grids. MRG Grid provides a job-queueing mechanism, scheduling     policy, and a priority scheme, as well as resource monitoring and resource     management. Users submit their jobs to MRG Grid, where they are placed into     a queue. MRG Grid then chooses when and where to run the jobs based upon a     policy, carefully monitors their progress, and ultimately informs the user     upon completion.

    Multiple format string flaws were found in Condor. An authenticated Condor     service user could use these flaws to prevent other jobs from being     scheduled and executed, crash the condor_schedd daemon, or, possibly,     execute arbitrary code with the privileges of the condor user.
    (CVE-2011-4930)

    These updated packages for Red Hat Enterprise Linux 5 provide enhancements     and bug fixes for the Grid component of MRG. Some select enhancements and     fixes include:

    * Addition of -sort option to condor_status

    * Customized output from condor_q -run for EC2 jobs

    * Enhanced the summary line provided by condor_q

    * Improved Collector performance around blocking network calls

    * Fixed a memory leak associated with python-psycopg2 hit by cumin-data

    Space precludes documenting all of these changes in this advisory. Refer to     the Red Hat Enterprise MRG 2 Technical Notes document for information on     these changes:

    https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/index.html

    All users of the Grid capabilities of Red Hat Enterprise MRG 2 are advised     to upgrade to these updated packages, which resolve the issues and add the     enhancements noted in the Red Hat Enterprise MRG 2 Technical Notes.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Updated Grid component packages that fix multiple security issues, multiple bugs, and add various enhancements are now available for Red Hat Enterprise MRG 2 for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Red Hat Enterprise MRG (Messaging, Realtime, and Grid) is a next-generation IT infrastructure for enterprise computing. MRG offers increased performance, reliability, interoperability, and faster computing for enterprise customers.

MRG Grid provides high-throughput computing and enables enterprises to achieve higher peak computing capacity as well as improved infrastructure utilization by leveraging their existing technology to build high performance grids. MRG Grid provides a job-queueing mechanism, scheduling policy, and a priority scheme, as well as resource monitoring and resource management. Users submit their jobs to MRG Grid, where they are placed into a queue. MRG Grid then chooses when and where to run the jobs based upon a policy, carefully monitors their progress, and ultimately informs the user upon completion.

Multiple format string flaws were found in Condor. An authenticated Condor service user could use these flaws to prevent other jobs from being scheduled and executed or crash the condor_schedd daemon.
(CVE-2011-4930)

These updated packages for Red Hat Enterprise Linux 6 provide enhancements and bug fixes for the Grid component of MRG. Some select enhancements and fixes include :

* Addition of -sort option to condor_status

* Customized output from condor_q -run for EC2 jobs

* Enhanced the summary line provided by condor_q

* Improved Collector performance around blocking network calls

* Fixed a memory leak associated with python-psycopg2 hit by cumin-data

Space precludes documenting all of these changes in this advisory.
Refer to the Red Hat Enterprise MRG 2 Technical Notes document for information on these changes :

https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_MRG/2/html/ Technical_Notes/index.html

All users of the Grid capabilities of Red Hat Enterprise MRG 2 are advised to upgrade to these updated packages, which resolve the issues and add the enhancements noted in the Red Hat Enterprise MRG 2 Technical Notes.

Update to latest development release 7.7.5

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
76638	RHEL 5 : MRG Grid (RHSA-2012:0100)	Nessus	Red Hat Local Security Checks	high
76637	RHEL 6 : MRG (RHSA-2012:0099)	Nessus	Red Hat Local Security Checks	medium
58372	Fedora 15 : condor-7.7.5-0.2.fc15 (2012-3363)	Nessus	Fedora Local Security Checks	medium
58370	Fedora 16 : condor-7.7.5-0.2.fc16 (2012-3341)	Nessus	Fedora Local Security Checks	medium
58366	Fedora 17 : condor-7.7.5-0.2.fc17.2 (2012-3263)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2011-4930

high

Tenable Plugins

high

medium

medium

medium

medium