7.2

CVE-2010-4512

Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveraging world writable permissions for files and directories.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Michael Dehaan ≫ Cobbler Version <= 2.0.3.1-2
Michael Dehaan ≫ Cobbler Version 0.1.1.7
Michael Dehaan ≫ Cobbler Version 0.2.1
Michael Dehaan ≫ Cobbler Version 0.2.2
Michael Dehaan ≫ Cobbler Version 0.2.3
Michael Dehaan ≫ Cobbler Version 0.2.5
Michael Dehaan ≫ Cobbler Version 0.2.7
Michael Dehaan ≫ Cobbler Version 0.2.8
Michael Dehaan ≫ Cobbler Version 0.2.9
Michael Dehaan ≫ Cobbler Version 0.3.0
Michael Dehaan ≫ Cobbler Version 0.3.1
Michael Dehaan ≫ Cobbler Version 0.3.3
Michael Dehaan ≫ Cobbler Version 0.3.4
Michael Dehaan ≫ Cobbler Version 0.3.5
Michael Dehaan ≫ Cobbler Version 0.3.6
Michael Dehaan ≫ Cobbler Version 0.3.7
Michael Dehaan ≫ Cobbler Version 0.3.9
Michael Dehaan ≫ Cobbler Version 0.4.0
Michael Dehaan ≫ Cobbler Version 0.4.2
Michael Dehaan ≫ Cobbler Version 0.4.3
Michael Dehaan ≫ Cobbler Version 0.4.5
Michael Dehaan ≫ Cobbler Version 0.4.6
Michael Dehaan ≫ Cobbler Version 0.4.7
Michael Dehaan ≫ Cobbler Version 0.4.8
Michael Dehaan ≫ Cobbler Version 0.5.0
Michael Dehaan ≫ Cobbler Version 0.6.0
Michael Dehaan ≫ Cobbler Version 0.6.1
Michael Dehaan ≫ Cobbler Version 0.6.3
Michael Dehaan ≫ Cobbler Version 0.6.4
Michael Dehaan ≫ Cobbler Version 0.6.5
Michael Dehaan ≫ Cobbler Version 0.8.1
Michael Dehaan ≫ Cobbler Version 0.8.3
Michael Dehaan ≫ Cobbler Version 1.0.0
Michael Dehaan ≫ Cobbler Version 1.0.2
Michael Dehaan ≫ Cobbler Version 1.0.2-1
Michael Dehaan ≫ Cobbler Version 1.0.3-1
Michael Dehaan ≫ Cobbler Version 1.2.0
Michael Dehaan ≫ Cobbler Version 1.2.2
Michael Dehaan ≫ Cobbler Version 1.2.3
Michael Dehaan ≫ Cobbler Version 1.2.5
Michael Dehaan ≫ Cobbler Version 1.2.6
Michael Dehaan ≫ Cobbler Version 1.2.7
Michael Dehaan ≫ Cobbler Version 1.2.8
Michael Dehaan ≫ Cobbler Version 1.2.8-1
Michael Dehaan ≫ Cobbler Version 1.2.9
Michael Dehaan ≫ Cobbler Version 1.2.9-1
Michael Dehaan ≫ Cobbler Version 1.3.1
Michael Dehaan ≫ Cobbler Version 1.3.1-1
Michael Dehaan ≫ Cobbler Version 1.3.3
Michael Dehaan ≫ Cobbler Version 1.3.3-1
Michael Dehaan ≫ Cobbler Version 1.3.4
Michael Dehaan ≫ Cobbler Version 1.3.4-1
Michael Dehaan ≫ Cobbler Version 1.4.0
Michael Dehaan ≫ Cobbler Version 1.4.0-2
Michael Dehaan ≫ Cobbler Version 1.4.1
Michael Dehaan ≫ Cobbler Version 1.4.1-1
Michael Dehaan ≫ Cobbler Version 1.4.2
Michael Dehaan ≫ Cobbler Version 1.4.2-1
Michael Dehaan ≫ Cobbler Version 1.4.3
Michael Dehaan ≫ Cobbler Version 1.4.3-4
Michael Dehaan ≫ Cobbler Version 1.6.1
Michael Dehaan ≫ Cobbler Version 1.6.1-1
Michael Dehaan ≫ Cobbler Version 1.6.2
Michael Dehaan ≫ Cobbler Version 1.6.2-1
Michael Dehaan ≫ Cobbler Version 1.6.3
Michael Dehaan ≫ Cobbler Version 1.6.3-1
Michael Dehaan ≫ Cobbler Version 1.6.4
Michael Dehaan ≫ Cobbler Version 1.6.4-1
Michael Dehaan ≫ Cobbler Version 1.6.5
Michael Dehaan ≫ Cobbler Version 1.6.5-1
Michael Dehaan ≫ Cobbler Version 1.6.6
Michael Dehaan ≫ Cobbler Version 1.6.6-1
Michael Dehaan ≫ Cobbler Version 1.6.8
Michael Dehaan ≫ Cobbler Version 1.6.8-1
Michael Dehaan ≫ Cobbler Version 2.0.0
Michael Dehaan ≫ Cobbler Version 2.0.0-1
Michael Dehaan ≫ Cobbler Version 2.0.1
Michael Dehaan ≫ Cobbler Version 2.0.1-1
Michael Dehaan ≫ Cobbler Version 2.0.3
Michael Dehaan ≫ Cobbler Version 2.0.3.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.231
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://people.fedoraproject.org/~shenson/cobbler/cobbler-2.0.8.tar.gz
Patch
http://secunia.com/advisories/42602
https://bugzilla.redhat.com/show_bug.cgi?id=554567