CVE-2011-4953

CVE-2011-4953 affects cobbler prior to 2.2.2 where set_mgmt_parameters in item.py uses yaml.load instead of yaml.safe_load, enabling code execution via crafted input (e.g., Puppet). OpenSUSE and GHSA entries confirm the code-injection risk and list cobbler upgrades/ patches as mitigation; remedia...

openSUSE Security Update : cobbler (openSUSE-SU-2012:0639-1)

Specially crafted YAML could allow attackers to execute arbitrary code due to the use of yaml.load instead of yaml.safeload. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-287...