GitHub Advisoryadvisory · PyPI

GHSA-hpj3-5p46-g87w Cobbler vulnerable to code injection via unsafe YAML loading

MEDIUM Published 2022-05-17 Modified 2024-01-15 Official page ↗

Aliases: CVE-2011-4953
Ecosystem: PyPI
Packages: cobbler
Severity: Moderate
Weaknesses: CWE-20, CWE-94
Reviewed: 2024-01-15

Affected packages

• PyPI cobbler: < 2.6.0 → fixed in 2.6.0

Description

The `set_mgmt_parameters` function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the `yaml.load` function instead of the `yaml.safe_load function`, as demonstrated using Puppet.

Alias · CVE (1)

CVE-2011-4953 The set_mgmt_parameters function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via… vulnerability

Weakness · CWE (2)

CWE-20 Improper Input Validation weakness
CWE-94 Improper Control of Generation of Code weakness

References

https://nvd.nist.gov/vuln/detail/CVE-2011-4953 advisory
https://github.com/cobbler/cobbler/commit/1b4f9ecf051422eb8512794701900f6199651442 web
https://bugs.launchpad.net/ubuntu/oneiric/+source/cobbler/+bug/858883 web
https://bugzilla.novell.com/show_bug.cgi?id=757062 web
https://github.com/cobbler/cobbler package
http://lists.opensuse.org/opensuse-security-announce/2012-04/msg00019.html web