CVE-2009-4261

Published: Dec 21, 2009Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple directory traversal vulnerabilities in the iallocator framework in Ganeti 1.2.4 through 1.2.8, 2.0.0 through 2.0.4, and 2.1.0 before 2.1.0~rc2 allow (1) remote attackers to execute arbitrary programs via a crafted external script name supplied through the HTTP remote API (RAPI) and allow (2) local users to execute arbitrary programs and gain privileges via a crafted external script name supplied through a gnt-* command, related to "path sanitization errors."

Affected (11)

Products: Roman Marxer: Ganeti

1 product

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Roman Marxer Ganeti	Version 1.2.4
Roman Marxer Ganeti	Version 1.2.5
Roman Marxer Ganeti	Version 1.2.6
Roman Marxer Ganeti	Version 1.2.7
Roman Marxer Ganeti	Version 1.2.8
Roman Marxer Ganeti	Version 2.0.0
Roman Marxer Ganeti	Version 2.0.0 rc1
Roman Marxer Ganeti	Version 2.0.1
Roman Marxer Ganeti	Version 2.0.2
Roman Marxer Ganeti	Version 2.0.3
Roman Marxer Ganeti	Version 2.1.0 rc1

Related CWEs

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (20)

http://git.ganeti.org/?p=ganeti.git%3Ba=blobdiff%3Bf=NEWS%3Bh=34b46426eca82c351e0a478c71edb66b9bb4b228%3Bhp=7f916c59238503915e927377d887b93eef1f676c%3Bhb=e5823b7e2cd8a3c9037a10aa59823a45642ce29f%3Bhpb=f95c81bf21c177f7e6a2c53ea0613034326329bd

Source: cve@mitre.org

http://git.ganeti.org/?p=ganeti.git%3Ba=blobdiff%3Bf=lib/constants.py%3Bh=81302575487a44ed192e61aa7b21888a215ef215%3Bhp=c353878ed83ce66d21c237da5e709dedd7b6f26b%3Bhb=0084657a21afb49c6f74498f27b97dfdbc42b383%3Bhpb=d24cb69273e4b03ffcd4e4768d95841b5570e264

Source: cve@mitre.org

http://git.ganeti.org/?p=ganeti.git%3Ba=blobdiff%3Bf=lib/utils.py%3Bh=bcd8e107bbc44ff94a4bc3dc405b5547719f001d%3Bhp=df2d18027e83b7783e146cbbe58f7efa92317980%3Bhb=f95c81bf21c177f7e6a2c53ea0613034326329bd%3Bhpb=4fe80ef2ed1cda3a6357274eccafe5c1f21a5283

Source: cve@mitre.org

http://git.ganeti.org/?p=ganeti.git%3Ba=commit%3Bh=f95c81bf21c177f7e6a2c53ea0613034326329bd

Source: cve@mitre.org

http://groups.google.com/group/ganeti/browse_thread/thread/cbce23d89103a8d2

Source: cve@mitre.org

Patch

http://secunia.com/advisories/37849

Source: cve@mitre.org

Vendor Advisory

http://www.ocert.org/advisories/ocert-2009-019.html

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2009/12/17/5

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/508535/100/0/threaded

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/3599

Source: cve@mitre.org

Vendor Advisory

http://git.ganeti.org/?p=ganeti.git%3Ba=blobdiff%3Bf=NEWS%3Bh=34b46426eca82c351e0a478c71edb66b9bb4b228%3Bhp=7f916c59238503915e927377d887b93eef1f676c%3Bhb=e5823b7e2cd8a3c9037a10aa59823a45642ce29f%3Bhpb=f95c81bf21c177f7e6a2c53ea0613034326329bd

Source: af854a3a-2127-422b-91ae-364da2661108

http://git.ganeti.org/?p=ganeti.git%3Ba=blobdiff%3Bf=lib/constants.py%3Bh=81302575487a44ed192e61aa7b21888a215ef215%3Bhp=c353878ed83ce66d21c237da5e709dedd7b6f26b%3Bhb=0084657a21afb49c6f74498f27b97dfdbc42b383%3Bhpb=d24cb69273e4b03ffcd4e4768d95841b5570e264

Source: af854a3a-2127-422b-91ae-364da2661108

http://git.ganeti.org/?p=ganeti.git%3Ba=blobdiff%3Bf=lib/utils.py%3Bh=bcd8e107bbc44ff94a4bc3dc405b5547719f001d%3Bhp=df2d18027e83b7783e146cbbe58f7efa92317980%3Bhb=f95c81bf21c177f7e6a2c53ea0613034326329bd%3Bhpb=4fe80ef2ed1cda3a6357274eccafe5c1f21a5283

Source: af854a3a-2127-422b-91ae-364da2661108

http://git.ganeti.org/?p=ganeti.git%3Ba=commit%3Bh=f95c81bf21c177f7e6a2c53ea0613034326329bd

Source: af854a3a-2127-422b-91ae-364da2661108

http://groups.google.com/group/ganeti/browse_thread/thread/cbce23d89103a8d2

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://secunia.com/advisories/37849

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.ocert.org/advisories/ocert-2009-019.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2009/12/17/5

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/508535/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2009/3599

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.