Path traversal

Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile...

CVE-2014-3225

Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile...

UBUNTU-CVE-2014-3225

Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile...

CVE-2014-3225

CVE-2014-3225 affects Cobbler’s web interface (2.4.x–2.6.x). The vulnerability is an absolute path traversal in the Kickstart field of a profile, allowing remote authenticated users to read arbitrary files. Public references describe practical impact as reading files via the web interface; severa...

CVE-2014-3225

Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile...

Cobbler 2.6.0 Arbitrary File Read

Vulnerability title: Arbitrary file read CVE: CVE-2014-3225 Vendor: Cobbler Product: Cobbler Affected version: navigate to "View kickstart" - file is shown. ------------------------------ PROOF OF CONCEPT vid ------------------------------ https://www.youtube.com/watch?v=vuBaoQUFEYQ...

Local File inclusion

A local file inclusion is possible by specifying full path to any desired file in the Kickstart value in Cobbler's WebUI...

Cobbler 2.4.x - 2.6.x 本地文件包含

Cobbler是一个自动化管理和系统安装工具，安装过程中会配置授权和身份验证。 该软件并不对普通用户开放，而触发漏洞需要管理员。 并且，触发漏洞需要管理员主动添加如'/etc/passwd'的文件项目，然后进行项目查看才能读取任意文件。 0 2.4.x - 2.6.x 更新到最新版本...

[oss-security] CVE Request - Local File inclusion in Cobbler

hi, as reported in https://github.com/cobbler/cobbler/issues/939 A local file inclusion is possible by specifying full path to any desired file in the Kickstart value in Cobbler's WebUI in all versions. Cobbler ease setup of network installation environments. After informing cobbler team, a patch...

Cobbler Local File Inclusion Vulnerability

Cobbler versions 2.4.x through 2.6.x suffer from a local file inclusion vulnerability. Exploit Title: Local File Inclusion vulnerability in cobbler Exploit author: Dolev Farhi @f1nhack Date 07/05/2014 Vendor homepage: http://www.cobblerd.org Affected Software version: 2.4.x - 2.6.x Alerted vendor...

Cobbler Local File Inclusion

Exploit Title: Local File Inclusion vulnerability in cobbler Exploit author: Dolev Farhi @f1nhack Date 07/05/2014 Vendor homepage: http://www.cobblerd.org Affected Software version: 2.4.x - 2.6.x Alerted vendor: 7.5.14 Software Description ===================== Cobbler is a Linux installation...

Cobbler 2.4.x 2.6.x - Local File Inclusion

Cobbler 2.4.x 2.6.x - Local File Inclusion Exploit Title: Local File Inclusion vulnerability in cobbler Exploit author: Dolev Farhi @f1nhack Date 07/05/2014 Vendor homepage: http://www.cobblerd.org Affected Software version: 2.4.x - 2.6.x Alerted vendor: 7.5.14 Software Description...

Cobbler 2.4.x < 2.6.x - Local File Inclusion

Exploit Title: Local File Inclusion vulnerability in cobbler Exploit author: Dolev Farhi @f1nhack Date 07/05/2014 Vendor homepage: http://www.cobblerd.org Affected Software version: 2.4.x - 2.6.x Alerted vendor: 7.5.14 Software Description ===================== Cobbler is a Linux installation...

RHEL 5 / 6 : cobbler (RHSA-2012:1060)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2012:1060 advisory. Cobbler is a network install server. Cobbler supports PXE, virtualized installs, and re-installing existing Linux machines. A command injection...

openSUSE: Security Advisory for update (openSUSE-SU-2012:0655-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE Update for update openSUSE-SU-2012:0655-1 (update)

Check for the Version of update OpenVAS Vulnerability Test $Id: gbsuse201206551.nasl 8267 2018-01-02 06:29:17Z teissa $ SuSE Update for update openSUSE-SU-2012:0655-1 update Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program ...

Fedora 10 : cobbler-1.2.9-1.fc10 (2008-10069)

Fixes a security vulnerability where a CobblerWeb user if so configured can import a Python module via a web-edited Cheetah template and run commands as root. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Cobbler 2.2.0 Command Injection Vulnerability

Cobbler is prone to a remote command injection vulnerability. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Cobbler Detection (HTTP)

HTTP based detection of Cobbler. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/...

Moderate: Red Hat Security Advisory: cobbler security update

An updated cobbler package that fixes one security issue is now available for Red Hat Network Satellite 5.4. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...