531 matches found
Cobbler Default PXE Server Detection
Binary data 9767.prm...
SUSE-SU-2016:1367-1 Security update for SUSE Manager Server 2.1
This update for SUSE Manager Server 2.1 fixes the following issues: cobbler: - Add logrotate file for cobbler bsc976826 - Fix cobbler yaboot handling bsc968406, bsc966622 osad: - Fix file permissions bsc970550 rhnlib: - Use TLSv1METHOD in SSL Context bsc970989 spacewalk-backend: - Mgrnccsync: Ada...
CVE-2014-3654
Multiple cross-site scripting XSS vulnerabilities in spacewalk-java 2.0.2 in Spacewalk and Red Hat Network RHN Satellite 5.5 and 5.6 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to 1 kickstart/cobbler/CustomSnippetList.do, 2...
CVE-2011-4953
The setmgmtparameters function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the yaml.load function instead of the yaml.safeload function, as demonstrated using Puppet...
CVE-2011-4953
The setmgmtparameters function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the yaml.load function instead of the yaml.safeload function, as demonstrated using Puppet...
CVE-2011-4953
The setmgmtparameters function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the yaml.load function instead of the yaml.safeload function, as demonstrated using Puppet...
CVE-2011-4953
CVE-2011-4953 affects cobbler prior to 2.2.2 where set_mgmt_parameters in item.py uses yaml.load instead of yaml.safe_load, enabling code execution via crafted input (e.g., Puppet). OpenSUSE and GHSA entries confirm the code-injection risk and list cobbler upgrades/ patches as mitigation; remedia...
[SECURITY] Fedora 20 Update: cobbler-2.6.3-1.fc20
Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. There is also a web interface 'cobbler-web'. Cobbler's advanced features include importing...
[SECURITY] Fedora 19 Update: cobbler-2.6.3-1.fc19
Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, 'koan', that integrates with cobbler. There is also a web interface 'cobbler-web'. Cobbler's advanced features include importing...
Fedora Update for cobbler FEDORA-2014-8545
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for cobbler FEDORA-2014-8561
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 19 : cobbler-2.6.3-1.fc19 (2014-8545)
Update to 2.6.3 for CVE-2014-3225 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...
Fedora 20 : cobbler-2.6.3-1.fc20 (2014-8561)
Update to 2.6.3 for CVE-2014-3225 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...
Cobbler 2.4.x - 2.6.x - LFI Vulnerability
No description provided by source. Exploit Title: Local File Inclusion vulnerability in cobbler Exploit author: Dolev Farhi @f1nhack Date 07/05/2014 Vendor homepage: http://www.cobblerd.org Affected Software version: 2.4.x - 2.6.x Alerted vendor: 7.5.14 Software Description =====================...
openSUSE Security Update : cobbler (openSUSE-SU-2012:0655-1)
The xmlrpc interface of cobbler was prone to command injectoin %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-296. The text description of this plugin is C SUSE LLC...
openSUSE Security Update : cobbler (openSUSE-SU-2011:0277-1)
/var/log/cobbler/ directory was owned by the web service user. Access to this account could potentially be abused to corrupt files during root filesystem operations by the Cobbler daemon CVE-2011-1551. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
openSUSE Security Update : cobbler (openSUSE-SU-2012:0639-1)
Specially crafted YAML could allow attackers to execute arbitrary code due to the use of yaml.load instead of yaml.safeload. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-287...
openSUSE Security Update : cobbler (openSUSE-SU-2012:0557-1)
Specially crafted YAML could allow attackers to execute arbitrary code due to the use of yaml.load instead of yaml.safeload. Cobbler-web was prone to Cross-Site-Request-Forgery CSRF %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
FD - Cobbler Arbitrary File Read CVE-2014-3225
Vulnerability title: Arbitrary file read CVE: CVE-2014-3225 Vendor: Cobbler Product: Cobbler Affected version: =2.6.0 Fixed version: N/A Reported by: Dolev Farhi ---------------------------- VULNERABILITY Details: ---------------------------- In all Cobbler versions = 2.6.0 an arbitrary system...