CVE-2008-6954

The web interface (CobblerWeb) in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python code in cobblerd by editing a Cheetah kickstart template to import arbitrary Python modules.

Link	Resource
http://www.securityfocus.com/bid/32317	Patch
http://freshmeat.net/projects/cobbler/releases/288374	Patch
http://osvdb.org/50291
http://secunia.com/advisories/32737	Vendor Advisory
http://secunia.com/advisories/32804	Vendor Advisory
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00485.html
https://www.redhat.com/archives/fedora-package-announce/2008-November/msg00462.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/46625

Configuration 1

cpe:2.3:a:michael_dehaan:cobbler:1.0.2:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:1.2.0:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.2.3:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:1.2.2:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.2.7:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.3.5:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.3.0:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:1.2.6:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.4.0:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:1.2.3:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.4.3:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.8.1:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.2.5:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.8.3:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:1.0.2-1:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.3.7:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:*:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.6.4:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.4.6:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.2.1:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.4.7:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.6.5:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.6.1:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:1.2.5:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.1.1.7:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.3.9:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.4.2:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:1.0.3-1:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:1.0.0:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.5.0:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.6.0:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.3.4:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.2.8:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:1.2.7:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.2.2:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.4.8:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.6.3:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.3.1:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.2.9:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.3.3:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.4.5:*:*:*:*:*:*:* cpe:2.3:a:michael_dehaan:cobbler:0.3.6:*:*:*:*:*:*:*

---

Published : 2009-08-12 10:30

Updated : 2017-08-17 01:29

---

NVD link : CVE-2008-6954

Mitre link : CVE-2008-6954

Michael Dehaan

CWE-264