PT-2014-5150 · Cobbler+1 · Cobbler+1

Published 2014-05-14 · Updated 2024-06-15 · CVE-2014-3225

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cobbler versions 2.4.x through 2.6.x

Description The issue allows remote authenticated users to read arbitrary files via the Kickstart field in a profile due to an absolute path traversal vulnerability in the web interface.

Recommendations For Cobbler versions 2.4.x through 2.6.x, consider restricting access to the Kickstart field in profiles to minimize the risk of exploitation until a patch is available.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2014-3225

GHSA-XC7W-JVHX-P6Q9

OPENSUSE-SU-2024:10282-1

USN-6475-1

Affected Products

Cobbler

Ubuntu

References · 33

• 🔥 http://packetstormsecurity.com/files/126553/Cobbler-Local-File-Inclusion.html · Exploit
• 🔥 https://youtube.com/watch?v=vuBaoQUFEYQ&feature=youtu.be · Exploit
• 🔥 http://exploit-db.com/exploits/33252 · Exploit
• 🔥 https://exploit-db.com/exploits/33252 · Exploit
• https://ubuntu.com/security/CVE-2021-40324 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-45083 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6475-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-3225 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10931 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-3225 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-3225 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10282-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6475-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-40325 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1000226 · Vendor Advisory