Lucene search
+L

129 matches found

Prion
Prion
•added 2012/06/16 12:55 a.m.•23 views

Input validation

Incomplete blacklist vulnerability in actionpower.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 username or 2 password fields to the powersystem method in the xmlrpc API...

7.5CVSS8.2AI score0.05601EPSS
SaveExploits1References9Affected Software1
UbuntuCve
UbuntuCve
•added 2012/06/16 12:55 a.m.•34 views

CVE-2012-2395

Incomplete blacklist vulnerability in actionpower.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 username or 2 password fields to the powersystem method in the xmlrpc API...

7.5CVSS7.5AI score0.05601EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2012/06/16 12:00 a.m.•44 views

CVE-2012-2395

Incomplete blacklist vulnerability in actionpower.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 username or 2 password fields to the powersystem method in the xmlrpc API...

9.9AI score0.05601EPSS
SaveExploits1References9
CVE
CVE
•added 2012/06/16 12:00 a.m.•178 views

CVE-2012-2395

CVE-2012-2395 corresponds to a command-injection flaw in Cobbler's XML-RPC power_system API (action_power.py). The root cause is an incomplete blacklist allowing shell metacharacters in the username or password fields, enabling remote command execution. The CVE affected Cobbler 2.2.0, with a NVD ...

7.5CVSS9.7AI score0.05601EPSS
SaveExploits1References9Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/06/16 12:00 a.m.•6 views

CVE-2012-2395: Undefined Security Weakness

Incomplete blacklist vulnerability in actionpower.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 username or 2 password fields to the powersystem method in the xmlrpc API...

7.5CVSS6.4AI score0.05601EPSS
SaveExploits1References1
Mend
Mend
•added 2012/06/16 12:00 a.m.•4 views

CVE-2012-2395

Incomplete blacklist vulnerability in actionpower.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 username or 2 password fields to the powersystem method in the xmlrpc API...

7.5CVSS0.05601EPSS
SaveExploits1References19
OpenVAS
OpenVAS
•added 2009/02/16 12:00 a.m.•25 views

Fedora Update for cobbler FEDORA-2008-10000

Check for the Version of cobbler OpenVAS Vulnerability Test Fedora Update for cobbler FEDORA-2008-10000 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

0.1AI score
SaveExploits0References2
Fedora
Fedora
•added 2008/11/19 2:52 p.m.•27 views

[SECURITY] Fedora 9 Update: cobbler-1.2.9-1.fc9

Cobbler is a network boot and update server. Cobbler supports PXE, provisioning virtualized images, and reinstalling existing Linux machines. The last two modes require a helper tool called 'koan' that integrates with cobbler. Cobbler's advanced features include importing distributions from DVDs...

7AI score
SaveExploits0
Fedora
Fedora
•added 2008/11/19 2:49 p.m.•26 views

[SECURITY] Fedora 8 Update: cobbler-1.2.9-1.fc8

Cobbler is a network boot and update server. Cobbler supports PXE, provisioning virtualized images, and reinstalling existing Linux machines. The last two modes require a helper tool called 'koan' that integrates with cobbler. Cobbler's advanced features include importing distributions from DVDs...

7AI score
SaveExploits0
Rows per page
Query Builder