CVE-2012-3491

Name	CVE-2012-3491
Description	src/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle jobs via unspecified vectors.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	688210

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
condor (PTS)	jessie	8.2.3~dfsg.1-6	fixed
	stretch (security), stretch (lts), stretch	8.4.11~dfsg.1-1+deb9u2	fixed
	buster, buster (security)	8.6.8~dfsg.1-2+deb10u1	fixed
	sid, trixie	23.4.0+dfsg-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
condor	source	(unstable)	7.8.2~dfsg.1-1+deb7u1			688210