CVE:CVE-2010-4512
CNNVD:CNNVD-201012-124
Cobbler 是一个能够快速设定网络安装环境的Linux安装服务器。
Cobbler 2.0.4之前版本使用了不正确的umask值。本地用户可以通过利用对文件和目录的全局写入许可产生未明影响。
solution:Upgrade michael_dehaan cobbler to a higher version than 2.0.3.1-2,0.1.1.7,0.2.1,0.2.2,0.2.3,0.2.5,0.2.7,0.2.8,0.2.9,0.3.0,0.3.1,0.3.3,0.3.4,0.3.5,0.3.6,0.3.7,0.3.9,0.4.0,0.4.2,0.4.3,0.4.5,0.4.6,0.4.7,0.4.8,0.5.0,0.6.0,0.6.1,0.6.3,0.6.4,0.6.5,0.8.1,0.8.3,1.0.0,1.0.2,1.0.2-1,1.0.3-1,1.2.0,1.2.2,1.2.3,1.2.5,1.2.6,1.2.7,1.2.8,1.2.8-1,1.2.9,1.2.9-1,1.3.1,1.3.1-1,1.3.3,1.3.3-1,1.3.4,1.3.4-1,1.4.0,1.4.0-2,1.4.1,1.4.1-1,1.4.2,1.4.2-1,1.4.3,1.4.3-4,1.6.1,1.6.1-1,1.6.2,1.6.2-1,1.6.3,1.6.3-1,1.6.4,1.6.4-1,1.6.5,1.6.5-1,1.6.6,1.6.6-1,1.6.8,1.6.8-1,2.0.0,2.0.0-1,2.0.1,2.0.1-1,2.0.3,2.0.3.1,and avoid the version (,2.0.3.1-2],0.1.1.7,0.2.1,0.2.2,0.2.3,0.2.5,0.2.7,0.2.8,0.2.9,0.3.0,0.3.1,0.3.3,0.3.4,0.3.5,0.3.6,0.3.7,0.3.9,0.4.0,0.4.2,0.4.3,0.4.5,0.4.6,0.4.7,0.4.8,0.5.0,0.6.0,0.6.1,0.6.3,0.6.4,0.6.5,0.8.1,0.8.3,1.0.0,1.0.2,1.0.2-1,1.0.3-1,1.2.0,1.2.2,1.2.3,1.2.5,1.2.6,1.2.7,1.2.8,1.2.8-1,1.2.9,1.2.9-1,1.3.1,1.3.1-1,1.3.3,1.3.3-1,1.3.4,1.3.4-1,1.4.0,1.4.0-2,1.4.1,1.4.1-1,1.4.2,1.4.2-1,1.4.3,1.4.3-4,1.6.1,1.6.1-1,1.6.2,1.6.2-1,1.6.3,1.6.3-1,1.6.4,1.6.4-1,1.6.5,1.6.5-1,1.6.6,1.6.6-1,1.6.8,1.6.8-1,2.0.0,2.0.0-1,2.0.1,2.0.1-1,2.0.3,2.0.3.1