CVE-2012-3537

CVE-2012-3537 affects the Crowbar project’s Crowbar Deployer, specifically the Ohai plugin (chef/cookbooks/ohai/files/default/plugins/crowbar.rb). The vulnerability is due to insecure handling of temporary files and predictable file names, enabling local users to execute arbitrary shell commands....

CVE-2012-3537

The Crowbar Ohai plugin chef/cookbooks/ohai/files/default/plugins/crowbar.rb in the Deployer Barclamp in Crowbar, possibly 1.4 and earlier, allows local users to execute arbitrary shell commands via vectors related to "insecure handling of tmp files" and predictable file names...