PT-2010-5515 · Cobbler · Cobbler

Martin Osvald · Published 2010-12-09 · Updated 2010-12-18 · CVE-2010-4512

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cobbler versions prior to 2.0.4

Description The issue allows local users to have an unspecified impact by leveraging world-writable permissions for files and directories due to an incorrect umask value.

Recommendations For versions prior to 2.0.4, update to version 2.0.4 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-4512

Affected Products

Cobbler

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2010-4512 · Security Note
• http://people.fedoraproject.org/~shenson/cobbler/cobbler-2.0.8.tar.gz · Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=554567 · Note
• http://secunia.com/advisories/42602 · Note