Michael Dehaan Cobbler
5 CVEs affecting Michael Dehaan Cobbler. Latest disclosed: 2012-06-16. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2012-2395 | | 2012-06-16 | Incomplete blacklist vulnerability in action_power.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1… | |
CVE-2010-4512 | | 2010-12-09 | Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveraging world writable permissions for files a… | |
CVE-2010-2235 | | 2010-12-09 | template_api.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template e… | |
CVE-2009-5021 | | 2010-12-09 | Cobbler before 1.6.1 does not properly determine whether an installation has the default password, which makes it easier for attackers to obtain access by usin… | |
CVE-2008-6954 | | 2009-08-12 | The web interface (CobblerWeb) in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python code in cobblerd by editing a Cheetah kick… |