CVEvulnerability
CVE-2010-4512
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-12-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveraging world writable permissions for files and directories.
Affected configurations
• michael dehaan cobbler (<= 2.0.3.1-2)
• michael dehaan cobbler 0.1.1.7
• michael dehaan cobbler 0.2.1
• michael dehaan cobbler 0.2.2
• michael dehaan cobbler 0.2.3
• michael dehaan cobbler 0.2.5
• michael dehaan cobbler 0.2.7
• michael dehaan cobbler 0.2.8
• michael dehaan cobbler 0.2.9
• michael dehaan cobbler 0.3.0
• michael dehaan cobbler 0.3.1
• michael dehaan cobbler 0.3.3
• michael dehaan cobbler 0.3.4
• michael dehaan cobbler 0.3.5
• michael dehaan cobbler 0.3.6
• michael dehaan cobbler 0.3.7
• michael dehaan cobbler 0.3.9
• michael dehaan cobbler 0.4.0
• michael dehaan cobbler 0.4.2
• michael dehaan cobbler 0.4.3
• michael dehaan cobbler 0.4.5
• michael dehaan cobbler 0.4.6
• michael dehaan cobbler 0.4.7
• michael dehaan cobbler 0.4.8
• michael dehaan cobbler 0.5.0
• michael dehaan cobbler 0.6.0
• michael dehaan cobbler 0.6.1
• michael dehaan cobbler 0.6.3
• michael dehaan cobbler 0.6.4
• michael dehaan cobbler 0.6.5
• michael dehaan cobbler 0.8.1
• michael dehaan cobbler 0.8.3
• michael dehaan cobbler 1.0.0
• michael dehaan cobbler 1.0.2
• michael dehaan cobbler 1.0.2-1
• michael dehaan cobbler 1.0.3-1
• michael dehaan cobbler 1.2.0
• michael dehaan cobbler 1.2.2
• michael dehaan cobbler 1.2.3
• michael dehaan cobbler 1.2.5
• michael dehaan cobbler 1.2.6
• michael dehaan cobbler 1.2.7
• michael dehaan cobbler 1.2.8
• michael dehaan cobbler 1.2.8-1
• michael dehaan cobbler 1.2.9
• michael dehaan cobbler 1.2.9-1
• michael dehaan cobbler 1.3.1
• michael dehaan cobbler 1.3.1-1
• michael dehaan cobbler 1.3.3
• michael dehaan cobbler 1.3.3-1
• michael dehaan cobbler 1.3.4
• michael dehaan cobbler 1.3.4-1
• michael dehaan cobbler 1.4.0
• michael dehaan cobbler 1.4.0-2
• michael dehaan cobbler 1.4.1
• michael dehaan cobbler 1.4.1-1
• michael dehaan cobbler 1.4.2
• michael dehaan cobbler 1.4.2-1
• michael dehaan cobbler 1.4.3
• michael dehaan cobbler 1.4.3-4
… and 20 more
Related
Weakness · not in database (1)
References
- http://people.fedoraproject.org/~shenson/cobbler/cobbler-2.0.8.tar.gz Patch
- http://secunia.com/advisories/42602 secunia.com
- https://bugzilla.redhat.com/show_bug.cgi?id=554567 bugzilla.redhat.com
- http://people.fedoraproject.org/~shenson/cobbler/cobbler-2.0.8.tar.gz Patch
- http://secunia.com/advisories/42602 secunia.com
- https://bugzilla.redhat.com/show_bug.cgi?id=554567 bugzilla.redhat.com