CVE-2011-4954

Published: Nov 19, 2019Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

cobbler has local privilege escalation via the use of insecure location for PYTHON_EGG_CACHE

Affected (1)

Products: Cobblerd: Cobbler

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cobblerd Cobbler	All versions

Related CWEs

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (10)

http://www.openwall.com/lists/oss-security/2012/04/12/10

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://access.redhat.com/security/cve/cve-2011-4954

Source: secalert@redhat.com

Third Party Advisory

https://bugs.gentoo.org/show_bug.cgi?id=CVE-2011-4954

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4954

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://security-tracker.debian.org/tracker/CVE-2011-4954

Source: secalert@redhat.com

Third Party Advisory

http://www.openwall.com/lists/oss-security/2012/04/12/10

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://access.redhat.com/security/cve/cve-2011-4954

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://bugs.gentoo.org/show_bug.cgi?id=CVE-2011-4954

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4954

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

https://security-tracker.debian.org/tracker/CVE-2011-4954

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.