oss-security - CVE Request - Local File inclusion in Cobbler

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <BFB17C16CEB8834FBCE8DCF6B3CFC7B601606FA5@SEAEMBX02.olympus.F5Net.com>
Date: Thu, 8 May 2014 06:43:38 +0000
From: Dolev Farhi <D.Farhi@...com>
To: "cve-assign@...re.org" <cve-assign@...re.org>,
	"oss-security@...ts.openwall.com" <oss-security@...ts.openwall.com>
Subject: CVE Request - Local File inclusion in Cobbler

hi,

as reported in https://github.com/cobbler/cobbler/issues/939

A local file inclusion is possible by specifying full path to any desired file in the Kickstart value in Cobbler's WebUI in all versions.

Cobbler ease setup of network installation environments.

After informing cobbler team, a patch will be released in the next version of Cobbler to address this issue

Can a CVE please be assign to this?

tx

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.