high7.2
CVE-2010-4512
Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveraging world writable permissions for files a…
Impact
Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveraging world writable permissions for files and directories.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Michael Dehaan | Cobbler | through 2.0.3.1-2 Versions 0.1.1.7, 0.2.1, 0.2.2, 0.2.3, 0.2.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://people.fedoraproject.org/~shenson/cobbler/cobbler-2.0.8.tar.gz
- http://secunia.com/advisories/42602
- https://bugzilla.redhat.com/show_bug.cgi?id=554567
- http://people.fedoraproject.org/~shenson/cobbler/cobbler-2.0.8.tar.gz
- http://secunia.com/advisories/42602
- https://bugzilla.redhat.com/show_bug.cgi?id=554567