CVE-2008-6954
CRITICAL
9.0
CVSS Severity Score
Vulnerability Description
The web interface (CobblerWeb) in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python code in cobblerd by editing a Cheetah kickstart template to import arbitrary Python modules.
Affected Platforms (CPE)
📦
Michael Dehaan
Cobbler
<= 1.2.8📦
Michael Dehaan
Cobbler
= 0.1.1.7📦
Michael Dehaan
Cobbler
= 0.2.1📦
Michael Dehaan
Cobbler
= 0.2.2📦
Michael Dehaan
Cobbler
= 0.2.3📦
Michael Dehaan
Cobbler
= 0.2.5📦
Michael Dehaan
Cobbler
= 0.2.7📦
Michael Dehaan
Cobbler
= 0.2.8📦
Michael Dehaan
Cobbler
= 0.2.9📦
Michael Dehaan
Cobbler
= 0.3.0📦
Michael Dehaan
Cobbler
= 0.3.1📦
Michael Dehaan
Cobbler
= 0.3.3📦
Michael Dehaan
Cobbler
= 0.3.4📦
Michael Dehaan
Cobbler
= 0.3.5📦
Michael Dehaan
Cobbler
= 0.3.6📦
Michael Dehaan
Cobbler
= 0.3.7📦
Michael Dehaan
Cobbler
= 0.3.9📦
Michael Dehaan
Cobbler
= 0.4.0📦
Michael Dehaan
Cobbler
= 0.4.2📦
Michael Dehaan
Cobbler
= 0.4.3📦
Michael Dehaan
Cobbler
= 0.4.5📦
Michael Dehaan
Cobbler
= 0.4.6📦
Michael Dehaan
Cobbler
= 0.4.7📦
Michael Dehaan
Cobbler
= 0.4.8📦
Michael Dehaan
Cobbler
= 0.5.0📦
Michael Dehaan
Cobbler
= 0.6.0📦
Michael Dehaan
Cobbler
= 0.6.1📦
Michael Dehaan
Cobbler
= 0.6.3📦
Michael Dehaan
Cobbler
= 0.6.4📦
Michael Dehaan
Cobbler
= 0.6.5📦
Michael Dehaan
Cobbler
= 0.8.1📦
Michael Dehaan
Cobbler
= 0.8.3📦
Michael Dehaan
Cobbler
= 1.0.0📦
Michael Dehaan
Cobbler
= 1.0.2📦
Michael Dehaan
Cobbler
= 1.0.2-1📦
Michael Dehaan
Cobbler
= 1.0.3-1📦
Michael Dehaan
Cobbler
= 1.2.0📦
Michael Dehaan
Cobbler
= 1.2.2📦
Michael Dehaan
Cobbler
= 1.2.3📦
Michael Dehaan
Cobbler
= 1.2.5📦
Michael Dehaan
Cobbler
= 1.2.6📦
Michael Dehaan