Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

michael_dehaan / cobbler CVEs

Beta · best-effort

5 CVEs tagged to michael_dehaan / cobbler — 1 Critical, 4 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to michael_dehaan vendor archive

CVE-2012-2395

Published Jun 16, 2012

Incomplete blacklist vulnerability in action_power.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) pa…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2010-4512

Published Dec 9, 2010

Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveraging world writable permissions for files and directories.

CVSS 7.2 · High

Vendor/product tagsBeta · best-effort

CVE-2010-2235

Published Dec 9, 2010

template_api.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template engine to execute Pyt…

CVSS 8.5 · High

Vendor/product tagsBeta · best-effort

CVE-2009-5021

Published Dec 9, 2010

Cobbler before 1.6.1 does not properly determine whether an installation has the default password, which makes it easier for attackers to obtain access by using this password.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2008-6954

Published Aug 12, 2009

The web interface (CobblerWeb) in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python code in cobblerd by editing a Cheetah kickstart template to im…

CVSS 9.0 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1