Cobbler subject to Command Injection

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2012-2395 · ADVISORY
• cobbler/cobbler · WEB
• cobbler/cobbler commit 6d9167e · WEB
• bugs.launchpad.net/ubuntu/+source/cobbler/+bug/978999 · WEB
• cobbler/cobbler · PACKAGE
• lists.opensuse.org/opensuse-security-announce/2012-05/msg00016.html · WEB
• lists.opensuse.org/opensuse-security-announce/2012-07/msg00000.html · WEB
• web.archive.org/web/20120712025653/http://www.securityfocus.com/bid/53666 · WEB
• openwall.com/lists/oss-security/2012/05/23/18 · WEB
• openwall.com/lists/oss-security/2012/05/23/4 · WEB
• osvdb.org/82458 · WEB
• lists.opensuse.org/opensuse-security-announce/2012-05/msg00016.html

cobbler のその他の脆弱性

• CVE-2024-47533緊急 9.8Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulner…
• CVE-2022-0860緊急 9.1Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.
• CVE-2021-45083高 7.1An issue was discovered in Cobbler before 3.3.1. Files in /etc/cobbler are world readable. Two of those files contain some sensitive informa…
• CVE-2021-45082高 7.8An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to im…
• CVE-2021-40325高 7.5Cobbler before 3.3.0 allows authorization bypass for modification of settings.