PT-2014-5939

Name of the Vulnerable Software and Affected Versions Foreman versions prior to 1.4.5 Foreman versions 1.5.x prior to 1.5.1 Description A directory traversal issue exists, allowing remote attackers to overwrite arbitrary files by utilizing a .. dot dot in the dst parameter to the "tftp/fetch boot...