SUSE openSUSE cobbler daemon Local Privilege Escalation Vulnerability

Bugtraq ID:	47163
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Apr 05 2011 12:00AM
Updated:	Apr 05 2011 12:00AM
Credit:	Reported in an SUSE security report.
Vulnerable:	SuSE openSUSE 11.4 Cobbler Cobbler 1.2.9 Cobbler Cobbler 1.2.8 1 Cobbler Cobbler 2.0.4 Cobbler Cobbler 2.0.3 Cobbler Cobbler 0
Not Vulnerable:

SUSE openSUSE cobbler daemon Local Privilege Escalation Vulnerability

SUSE openSUSE is prone to a local privilege-escalation vulnerability that affects the Cobbler domain.

Local attackers can exploit this issue to execute arbitrary code with superuser privileges. Successful exploits will result in the complete compromise of affected computers.

SUSE openSUSE cobbler daemon Local Privilege Escalation Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SUSE openSUSE cobbler daemon Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references for details.

SUSE openSUSE cobbler daemon Local Privilege Escalation Vulnerability

References:

• Cobbler Homepage (Cobbler)