Cobbler Web Interface Kickstart Template Remote Privilege Escalation Vulnerability
The web interface (CobblerWeb) in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python code with the root privileges in cobblerd by editing a Cheetah kickstart template to import arbitrary Python modules.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2008-6954US | high9.0 | — | ||
The web interface (CobblerWeb) in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python code in cobblerd by editing a Cheetah kickstart template to imp… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://freshmeat.net/projects/cobbler/releases/288374WEB
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46625WEB
- https://github.com/advisories/GHSA-p8w2-f44p-fmcjADVISORY
- https://github.com/cobbler/cobblerPACKAGE
- https://nvd.nist.gov/vuln/detail/CVE-2008-6954ADVISORY
- https://pypi.org/project/cobblerPACKAGE
- https://web.archive.org/web/20111227125913/http://secunia.com/advisories/32804WEB
- https://web.archive.org/web/20111227151912/http://secunia.com/advisories/32737WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan