PT-2009-6411 · Google · Ganeti

Andrea Barisani · Published 2009-12-21 · Updated 2018-10-10 · CVE-2009-4261

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ganeti versions 1.2.4 through 1.2.8 Ganeti versions 2.0.0 through 2.0.4 Ganeti versions 2.1.0 before 2.1.0~rc2

Description The issue is related to "path sanitization errors" in the iallocator framework, allowing for directory traversal vulnerabilities. This enables remote attackers to execute arbitrary programs via a crafted external script name supplied through the HTTP remote API (RAPI). Additionally, local users can execute arbitrary programs and gain privileges via a crafted external script name supplied through a gnt-* command.

Recommendations For Ganeti versions 1.2.4 through 1.2.8, update to a version outside of this range to mitigate the risk. For Ganeti versions 2.0.0 through 2.0.4, update to a version outside of this range to mitigate the risk. For Ganeti versions 2.1.0 before 2.1.0rc2, update to version 2.1.0rc2 or later to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2009-4261

DSA-1959-1

Affected Products

Ganeti

References · 14

• https://security-tracker.debian.org/tracker/CVE-2009-4261 · Vendor Advisory
• http://groups.google.com/group/ganeti/browse_thread/thread/cbce23d89103a8d2 · Patch
• https://osv.dev/vulnerability/CVE-2009-4261 · Vendor Advisory
• http://vupen.com/english/advisories/2009/3599 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-4261 · Vendor Advisory
• http://secunia.com/advisories/37849 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4261 · Security Note
• http://git.ganeti.org/?p=ganeti.git%3Ba=blobdiff%3Bf=lib/utils.py%3Bh=bcd8e107bbc44ff94a4bc3dc405b5547719f001d%3Bhp=df2d18027e83b7783e146cbbe58f7efa92317980%3Bhb=f95c81bf21c177f7e6a2c53ea0613034326329bd%3Bhpb=4fe80ef2ed1cda3a6357274eccafe5c1f21a5283 · Note
• http://git.ganeti.org/?p=ganeti.git%3Ba=blobdiff%3Bf=NEWS%3Bh=34b46426eca82c351e0a478c71edb66b9bb4b228%3Bhp=7f916c59238503915e927377d887b93eef1f676c%3Bhb=e5823b7e2cd8a3c9037a10aa59823a45642ce29f%3Bhpb=f95c81bf21c177f7e6a2c53ea0613034326329bd · Note
• http://securityfocus.com/archive/1/508535/100/0/threaded · Note
• http://openwall.com/lists/oss-security/2009/12/17/5 · Note
• http://ocert.org/advisories/ocert-2009-019.html · Note
• http://git.ganeti.org/?p=ganeti.git%3Ba=blobdiff%3Bf=lib/constants.py%3Bh=81302575487a44ed192e61aa7b21888a215ef215%3Bhp=c353878ed83ce66d21c237da5e709dedd7b6f26b%3Bhb=0084657a21afb49c6f74498f27b97dfdbc42b383%3Bhpb=d24cb69273e4b03ffcd4e4768d95841b5570e264 · Note
• http://git.ganeti.org/?p=ganeti.git%3Ba=commit%3Bh=f95c81bf21c177f7e6a2c53ea0613034326329bd · Note