CVEvulnerability
CVE-2012-3537
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-09-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The Crowbar Ohai plugin (chef/cookbooks/ohai/files/default/plugins/crowbar.rb) in the Deployer Barclamp in Crowbar, possibly 1.4 and earlier, allows local users to execute arbitrary shell commands via vectors related to "insecure handling of tmp files" and predictable file names.
Affected configurations
• dell crowbar (<= 1.4)
Related
Weakness · not in database (1)
References
- http://osvdb.org/84955 osvdb.org
- http://secunia.com/advisories/50442 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2012/08/27/5 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/08/27/7 www.openwall.com
- http://www.securityfocus.com/bid/55240 www.securityfocus.com
- https://bugzilla.novell.com/show_bug.cgi?id=774967 bugzilla.novell.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78041 exchange.xforce.ibmcloud.com
- https://github.com/SUSE-Cloud/barclamp-deployer/commit/5ea8d4ddaa4cb1ce834d36889f0fe7ac0d617bc8 Exploit, Patch
- https://github.com/SUSE-Cloud/barclamp-deployer/commit/b6454268a067fc77ff5de82057b5b53b3cc38b87 Exploit, Patch
- https://github.com/dellcloudedge/barclamp-deployer/pull/57 github.com
- http://osvdb.org/84955 osvdb.org
- http://secunia.com/advisories/50442 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2012/08/27/5 www.openwall.com
- http://www.openwall.com/lists/oss-security/2012/08/27/7 www.openwall.com
- http://www.securityfocus.com/bid/55240 www.securityfocus.com
- https://bugzilla.novell.com/show_bug.cgi?id=774967 bugzilla.novell.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78041 exchange.xforce.ibmcloud.com
- https://github.com/SUSE-Cloud/barclamp-deployer/commit/5ea8d4ddaa4cb1ce834d36889f0fe7ac0d617bc8 Exploit, Patch
- https://github.com/SUSE-Cloud/barclamp-deployer/commit/b6454268a067fc77ff5de82057b5b53b3cc38b87 Exploit, Patch
- https://github.com/dellcloudedge/barclamp-deployer/pull/57 github.com