CVE catalog

CVE-2012-3490

DEBIAN-CVE-2012-3490

Severity: Unknown
Published: Sep 19, 2012, 12:00:00 AM UTC
Updated: Sep 23, 2026, 7:00:45 AM UTC
Source: [NVD] · [CVE record]
EPSS: 3.57% · Oct 27, 2026

The (1) my_popenv_impl and (2) my_spawnv functions in src/condor_utils/my_popen.cpp and the (3) systemCommand function in condor_vm-gahp/vmgahp_common.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the return value of setuid calls, which might cause a subprocess to be created with root privileges and allow remote attackers to gain privileges via unspecified vectors.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	condor	13	`7.8.2~dfsg.1-1+deb7u1`	fixed
Debian	condor	14	`7.8.2~dfsg.1-1+deb7u1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	condor	deb	13	`7.8.2~dfsg.1-1+deb7u1`	Not reported	DEBIAN-CVE-2012-3490	Not reported
Debian	condor	deb	14	`7.8.2~dfsg.1-1+deb7u1`	Not reported	DEBIAN-CVE-2012-3490	Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

[condor]Fixed
Source package: [condor]
Details (2)
- 23.9.6+dfsg-2.1+b9 · amd64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
- 23.9.6+dfsg-2.1+b9 · arm64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
[condor-annex-ec2]Fixed
Source package: [condor]
Details (2)
- 23.9.6+dfsg-2.1+b9 · amd64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
- 23.9.6+dfsg-2.1+b9 · arm64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
[condor-dev]Fixed
Source package: [condor]
Details (2)
- 23.9.6+dfsg-2.1+b9 · amd64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
- 23.9.6+dfsg-2.1+b9 · arm64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
[condor-doc]Fixed
Source package: [condor]
Details (2)
- 23.9.6+dfsg-2.1 · all · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
- 23.9.6+dfsg-2.1 · all · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
[condor-kbdd]Fixed
Source package: [condor]
Details (2)
- 23.9.6+dfsg-2.1+b9 · amd64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
- 23.9.6+dfsg-2.1+b9 · arm64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
[condor-test]Fixed
Source package: [condor]
Details (2)
- 23.9.6+dfsg-2.1+b9 · amd64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
- 23.9.6+dfsg-2.1+b9 · arm64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
[condor-upgrade-checks]Fixed
Source package: [condor]
Details (2)
- 23.9.6+dfsg-2.1 · all · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
- 23.9.6+dfsg-2.1 · all · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
[condor-vm-gahp]Fixed
Source package: [condor]
Details (2)
- 23.9.6+dfsg-2.1+b9 · amd64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
- 23.9.6+dfsg-2.1+b9 · arm64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
[htcondor]Fixed
Source package: [condor]
Details (2)
- 23.9.6+dfsg-2.1+b9 · amd64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
- 23.9.6+dfsg-2.1+b9 · arm64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
[htcondor-annex-ec2]Fixed
Source package: [condor]
Details (2)
- 23.9.6+dfsg-2.1+b9 · amd64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
- 23.9.6+dfsg-2.1+b9 · arm64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
[htcondor-dev]Fixed
Source package: [condor]
Details (2)
- 23.9.6+dfsg-2.1+b9 · amd64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
- 23.9.6+dfsg-2.1+b9 · arm64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
[htcondor-doc]Fixed
Source package: [condor]
Details (2)
- 23.9.6+dfsg-2.1 · all · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
- 23.9.6+dfsg-2.1 · all · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
[htcondor-test]Fixed
Source package: [condor]
Details (2)
- 23.9.6+dfsg-2.1+b9 · amd64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
- 23.9.6+dfsg-2.1+b9 · arm64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
[htcondor-upgrade-checks]Fixed
Source package: [condor]
Details (2)
- 23.9.6+dfsg-2.1 · all · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
- 23.9.6+dfsg-2.1 · all · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
[minicondor]Fixed
Source package: [condor]
Details (2)
- 23.9.6+dfsg-2.1+b9 · amd64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
- 23.9.6+dfsg-2.1+b9 · arm64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
[minihtcondor]Fixed
Source package: [condor]
Details (2)
- 23.9.6+dfsg-2.1+b9 · amd64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13
- 23.9.6+dfsg-2.1+b9 · arm64 · trixie
  Fixed · Fixed: 7.8.2~dfsg.1-1+deb7u1
  pypi · condor · debian · 13

Observed: Oct 23, 2026, 5:06:23 PM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]