Cobbler Multiple Security Vulnerabilities

Bugtraq ID:	53002
Class:	Unknown
CVE:
Remote:	Yes
Local:	Yes
Published:	Apr 12 2012 12:00AM
Updated:	Apr 12 2012 12:00AM
Credit:	David Black and spamaps
Vulnerable:	Cobbler Cobbler 2.0.4 Cobbler Cobbler 2.0.3
Not Vulnerable:

Cobbler Multiple Security Vulnerabilities

Cobbler is prone to a local privilege-escalation vulnerability, a cross-site request-forgery vulnerability and a remote code-execution vulnerability.

Attackers can leverage these issues to gain elevated privileges, execute arbitrary code or perform unauthorized actions on behalf of legitimate users. Successfully exploiting the privilege-escalation issue will result in the complete compromise of affected computers.

Cobbler Multiple Security Vulnerabilities

An attacker can exploit these issues using readily available tools. To exploit the cross-site request-forgery issue, the attacker must entice an unsuspecting victim into following a malicious URI.

Cobbler Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

Cobbler Multiple Security Vulnerabilities

References:

• a some what odd configuration in cobbler.wsgi (David Black)
  
• Cobbler Homepage (Cobbler)
  
• cobbler.wsgi sets unsafe PYTHON_EGG_CACHE (spamaps)
  
• lack of csrf protection in cobbler-web (David Black)