CVE-2010-4179

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2010-4179
The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid (MRG) 1.3 recommends that Condor should be configured so that the MRG Management Console (cumin) can submit jobs for users, which creates a trusted channel with insufficient access control that allows local users with the ability to publish to a broker to run jobs as arbitrary users via Condor QMF plug-ins.

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://secunia.com/advisories/42406 Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0921.html Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0922.html Vendor Advisory
http://www.securitytracker.com/id?1024806
http://www.vupen.com/english/advisories/2010/3091 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=654856
Configurations

Configuration 1 (hide)

cpe:2.3:o:redhat:enterprise_mrg:1.3:*:*:*:*:*:*:*
History

13 Feb 2023, 04:28

Type Values Removed Values Added
References
  • {'url': 'https://access.redhat.com/security/cve/CVE-2010-4179', 'name': 'https://access.redhat.com/security/cve/CVE-2010-4179', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2010:0921', 'name': 'https://access.redhat.com/errata/RHSA-2010:0921', 'tags': [], 'refsource': 'MISC'}
  • {'url': 'https://access.redhat.com/errata/RHSA-2010:0922', 'name': 'https://access.redhat.com/errata/RHSA-2010:0922', 'tags': [], 'refsource': 'MISC'}
Summary CVE-2010-4179 schedd plugin: enable QUEUE_ALL_USERS_TRUSTED for Submit/Hold/Release/Remove ops The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid (MRG) 1.3 recommends that Condor should be configured so that the MRG Management Console (cumin) can submit jobs for users, which creates a trusted channel with insufficient access control that allows local users with the ability to publish to a broker to run jobs as arbitrary users via Condor QMF plug-ins.

02 Feb 2023, 14:15

Type Values Removed Values Added
Summary The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid (MRG) 1.3 recommends that Condor should be configured so that the MRG Management Console (cumin) can submit jobs for users, which creates a trusted channel with insufficient access control that allows local users with the ability to publish to a broker to run jobs as arbitrary users via Condor QMF plug-ins. CVE-2010-4179 schedd plugin: enable QUEUE_ALL_USERS_TRUSTED for Submit/Hold/Release/Remove ops
References
  • (MISC) https://access.redhat.com/security/cve/CVE-2010-4179 -
  • (MISC) https://access.redhat.com/errata/RHSA-2010:0921 -
  • (MISC) https://access.redhat.com/errata/RHSA-2010:0922 -

15 Jul 2021, 19:15

Type Values Removed Values Added
CPE cpe:2.3:a:redhat:enterprise_mrg:1.3:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_mrg:1.3:*:*:*:*:*:*:*
Information

Published : 2010-12-07 22:00

Updated : 2023-12-10 11:03

NVD link : CVE-2010-4179

Mitre link : CVE-2010-4179

CVE.ORG link : CVE-2010-4179

JSON object : View

Products Affected

redhat

  • enterprise_mrg
CWE
CWE-264

Permissions, Privileges, and Access Controls