oss-security - CVE request: arbitrary code exec in bcfg2

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20120627183222.GW1302@redhat.com>
Date: Wed, 27 Jun 2012 12:32:22 -0600
From: Vincent Danen <vdanen@...hat.com>
To: oss-security@...ts.openwall.com
Subject: CVE request: arbitrary code exec in bcfg2

bcfg2 suffers from an arbitrary code execution flaw due to the Trigger
plugin.  Upstream has corrected the issue in git, but no released
packages are available and it looks like this has been around for a
while (indicated that 1.x is affected as well, up to and including the
current 1.2.2 release).

Looks like an authenticated remote root compromise (need to be able to
log into bcfg2 to exploit it, and bcfg2 typically runs as root).

Could a CVE be assigned to this please?

References:

http://permalink.gmane.org/gmane.comp.sysutils.bcfg2.devel/4539
http://trac.mcs.anl.gov/projects/bcfg2/changeset/a524967e8d5c4c22e49cd619aed20c87a316c0be
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=679272
https://bugzilla.redhat.com/show_bug.cgi?id=835985

Thanks.

-- 
Vincent Danen / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.