Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Thu, 8 May 2014 06:43:38 +0000
From: Dolev Farhi <D.Farhi@...com>
To: "cve-assign@...re.org" <cve-assign@...re.org>,
	"oss-security@...ts.openwall.com" <oss-security@...ts.openwall.com>
Subject: CVE Request - Local File inclusion in Cobbler

hi,

as reported in https://github.com/cobbler/cobbler/issues/939

A local file inclusion is possible by specifying full path to any desired file in the Kickstart value in Cobbler's WebUI in all versions.

Cobbler ease setup of network installation environments.

After informing cobbler team, a patch will be released in the next version of Cobbler to address this issue

Can a CVE please be assign to this?

tx






Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ