CVE-2012-3537

Published: Sep 5, 2012Modified: Apr 29, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

The Crowbar Ohai plugin (chef/cookbooks/ohai/files/default/plugins/crowbar.rb) in the Deployer Barclamp in Crowbar, possibly 1.4 and earlier, allows local users to execute arbitrary shell commands via vectors related to "insecure handling of tmp files" and predictable file names.

Affected (1)

Products: Dell: Crowbar

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dell Crowbar	Up to 1.4

Related CWEs

References (20)

http://osvdb.org/84955

Source: secalert@redhat.com

http://secunia.com/advisories/50442

Source: secalert@redhat.com

Vendor Advisory

http://www.openwall.com/lists/oss-security/2012/08/27/5

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/08/27/7

Source: secalert@redhat.com

http://www.securityfocus.com/bid/55240

Source: secalert@redhat.com

https://bugzilla.novell.com/show_bug.cgi?id=774967

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/78041

Source: secalert@redhat.com

https://github.com/SUSE-Cloud/barclamp-deployer/commit/5ea8d4ddaa4cb1ce834d36889f0fe7ac0d617bc8

Source: secalert@redhat.com

ExploitPatch

https://github.com/SUSE-Cloud/barclamp-deployer/commit/b6454268a067fc77ff5de82057b5b53b3cc38b87

Source: secalert@redhat.com

ExploitPatch

https://github.com/dellcloudedge/barclamp-deployer/pull/57

Source: secalert@redhat.com

http://osvdb.org/84955

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/50442

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.openwall.com/lists/oss-security/2012/08/27/5

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/08/27/7

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/55240

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.novell.com/show_bug.cgi?id=774967

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/78041

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/SUSE-Cloud/barclamp-deployer/commit/5ea8d4ddaa4cb1ce834d36889f0fe7ac0d617bc8

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

https://github.com/SUSE-Cloud/barclamp-deployer/commit/b6454268a067fc77ff5de82057b5b53b3cc38b87

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

https://github.com/dellcloudedge/barclamp-deployer/pull/57

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.