PT-2010-5515 · Cobbler · Cobbler

Martin Osvald · Publicado 2010-12-09 · Atualizado 2010-12-18 · CVE-2010-4512

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cobbler versions prior to 2.0.4

Description The issue allows local users to have an unspecified impact by leveraging world-writable permissions for files and directories due to an incorrect umask value.

Recommendations For versions prior to 2.0.4, update to version 2.0.4 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-4512

Produtos afetados

Cobbler

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2010-4512 · Nota de Segurança
• http://people.fedoraproject.org/~shenson/cobbler/cobbler-2.0.8.tar.gz · Correção
• https://bugzilla.redhat.com/show_bug.cgi?id=554567 · Nota
• http://secunia.com/advisories/42602 · Nota