PT-2009-6411 · Google · Ganeti

Andrea Barisani · Publicado 2009-12-21 · Atualizado 2018-10-10 · CVE-2009-4261

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ganeti versions 1.2.4 through 1.2.8 Ganeti versions 2.0.0 through 2.0.4 Ganeti versions 2.1.0 before 2.1.0~rc2

Description The issue is related to "path sanitization errors" in the iallocator framework, allowing for directory traversal vulnerabilities. This enables remote attackers to execute arbitrary programs via a crafted external script name supplied through the HTTP remote API (RAPI). Additionally, local users can execute arbitrary programs and gain privileges via a crafted external script name supplied through a gnt-* command.

Recommendations For Ganeti versions 1.2.4 through 1.2.8, update to a version outside of this range to mitigate the risk. For Ganeti versions 2.0.0 through 2.0.4, update to a version outside of this range to mitigate the risk. For Ganeti versions 2.1.0 before 2.1.0rc2, update to version 2.1.0rc2 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2009-4261

DSA-1959-1

Produtos afetados

Ganeti

Referências · 14

• https://security-tracker.debian.org/tracker/CVE-2009-4261 · Aviso do Fabricante
• http://git.ganeti.org/?p=ganeti.git%3Ba=blobdiff%3Bf=lib/utils.py%3Bh=bcd8e107bbc44ff94a4bc3dc405b5547719f001d%3Bhp=df2d18027e83b7783e146cbbe58f7efa92317980%3Bhb=f95c81bf21c177f7e6a2c53ea0613034326329bd%3Bhpb=4fe80ef2ed1cda3a6357274eccafe5c1f21a5283 · Nota
• http://groups.google.com/group/ganeti/browse_thread/thread/cbce23d89103a8d2 · Correção
• http://git.ganeti.org/?p=ganeti.git%3Ba=blobdiff%3Bf=NEWS%3Bh=34b46426eca82c351e0a478c71edb66b9bb4b228%3Bhp=7f916c59238503915e927377d887b93eef1f676c%3Bhb=e5823b7e2cd8a3c9037a10aa59823a45642ce29f%3Bhpb=f95c81bf21c177f7e6a2c53ea0613034326329bd · Nota
• https://osv.dev/vulnerability/CVE-2009-4261 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/3599 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-4261 · Aviso do Fabricante
• http://securityfocus.com/archive/1/508535/100/0/threaded · Nota
• http://openwall.com/lists/oss-security/2009/12/17/5 · Nota
• http://ocert.org/advisories/ocert-2009-019.html · Nota
• http://git.ganeti.org/?p=ganeti.git%3Ba=blobdiff%3Bf=lib/constants.py%3Bh=81302575487a44ed192e61aa7b21888a215ef215%3Bhp=c353878ed83ce66d21c237da5e709dedd7b6f26b%3Bhb=0084657a21afb49c6f74498f27b97dfdbc42b383%3Bhpb=d24cb69273e4b03ffcd4e4768d95841b5570e264 · Nota
• http://secunia.com/advisories/37849 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-4261 · Nota de Segurança
• http://git.ganeti.org/?p=ganeti.git%3Ba=commit%3Bh=f95c81bf21c177f7e6a2c53ea0613034326329bd · Nota