CVE:CVE-2008-6954
CNNVD:CNNVD-200908-120
1.2.9版本以前的Cobbler的网络界面(CobblerWeb)会允许远程攻击者通过编辑一个Cheetah kickstart模板来输入任意Python模块，以执行任意Python代码。
solution:Upgrade michael_dehaan cobbler to a higher version than 1.2.8,0.1.1.7,0.2.1,0.2.2,0.2.3,0.2.5,0.2.7,0.2.8,0.2.9,0.3.0,0.3.1,0.3.3,0.3.4,0.3.5,0.3.6,0.3.7,0.3.9,0.4.0,0.4.2,0.4.3,0.4.5,0.4.6,0.4.7,0.4.8,0.5.0,0.6.0,0.6.1,0.6.3,0.6.4,0.6.5,0.8.1,0.8.3,1.0.0,1.0.2,1.0.2-1,1.0.3-1,1.2.0,1.2.2,1.2.3,1.2.5,1.2.6,1.2.7,and avoid the version (,1.2.8],0.1.1.7,0.2.1,0.2.2,0.2.3,0.2.5,0.2.7,0.2.8,0.2.9,0.3.0,0.3.1,0.3.3,0.3.4,0.3.5,0.3.6,0.3.7,0.3.9,0.4.0,0.4.2,0.4.3,0.4.5,0.4.6,0.4.7,0.4.8,0.5.0,0.6.0,0.6.1,0.6.3,0.6.4,0.6.5,0.8.1,0.8.3,1.0.0,1.0.2,1.0.2-1,1.0.3-1,1.2.0,1.2.2,1.2.3,1.2.5,1.2.6,1.2.7