CVE-2010-4512

cobbler: Insecure umask by creating /tftpboot/pxelinux.cfg/* files after cobbler sync

Published Dec 9, 2010 CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Description
Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveraging world writable permissions for files and directories.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-4480 Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveraging world writable permissions for files and directories.
History

No history.

Weaknesses
  • CWE-264
  • CWE-732

    Incorrect Permission Assignment for Critical Resource

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 3:51 AM
Reserved
Dec 9, 2010, 12:00 AM
Status
Modified
Published
Dec 9, 2010, 8:00 PM
Modified
Jun 16, 2026, 11:24 PM
Severity
Low
Public date
Jan 11, 2010, 12:00 AM