CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-6954

The web interface (CobblerWeb) in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python code in cobblerd by editing a Cheetah kickstart template to import arbitrary Python modules.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.018

EPSS Ranking 82.1%

CVSS Severity

CVSS v2 Score 9.0

References

Products affected by CVE-2008-6954

Michael Dehaan » Cobbler » Version: Any

cpe:2.3:a:michael_dehaan:cobbler:*
Michael Dehaan » Cobbler » Version: 0.1.1.7

cpe:2.3:a:michael_dehaan:cobbler:0.1.1.7
Michael Dehaan » Cobbler » Version: 0.2.1

cpe:2.3:a:michael_dehaan:cobbler:0.2.1
Michael Dehaan » Cobbler » Version: 0.2.2

cpe:2.3:a:michael_dehaan:cobbler:0.2.2
Michael Dehaan » Cobbler » Version: 0.2.3

cpe:2.3:a:michael_dehaan:cobbler:0.2.3
Michael Dehaan » Cobbler » Version: 0.2.5

cpe:2.3:a:michael_dehaan:cobbler:0.2.5
Michael Dehaan » Cobbler » Version: 0.2.7

cpe:2.3:a:michael_dehaan:cobbler:0.2.7
Michael Dehaan » Cobbler » Version: 0.2.8

cpe:2.3:a:michael_dehaan:cobbler:0.2.8
Michael Dehaan » Cobbler » Version: 0.2.9

cpe:2.3:a:michael_dehaan:cobbler:0.2.9
Michael Dehaan » Cobbler » Version: 0.3.0

cpe:2.3:a:michael_dehaan:cobbler:0.3.0
Michael Dehaan » Cobbler » Version: 0.3.1

cpe:2.3:a:michael_dehaan:cobbler:0.3.1
Michael Dehaan » Cobbler » Version: 0.3.3

cpe:2.3:a:michael_dehaan:cobbler:0.3.3
Michael Dehaan » Cobbler » Version: 0.3.4

cpe:2.3:a:michael_dehaan:cobbler:0.3.4
Michael Dehaan » Cobbler » Version: 0.3.5

cpe:2.3:a:michael_dehaan:cobbler:0.3.5
Michael Dehaan » Cobbler » Version: 0.3.6

cpe:2.3:a:michael_dehaan:cobbler:0.3.6
Michael Dehaan » Cobbler » Version: 0.3.7

cpe:2.3:a:michael_dehaan:cobbler:0.3.7
Michael Dehaan » Cobbler » Version: 0.3.9

cpe:2.3:a:michael_dehaan:cobbler:0.3.9
Michael Dehaan » Cobbler » Version: 0.4.0

cpe:2.3:a:michael_dehaan:cobbler:0.4.0
Michael Dehaan » Cobbler » Version: 0.4.2

cpe:2.3:a:michael_dehaan:cobbler:0.4.2
Michael Dehaan » Cobbler » Version: 0.4.3

cpe:2.3:a:michael_dehaan:cobbler:0.4.3
Michael Dehaan » Cobbler » Version: 0.4.5

cpe:2.3:a:michael_dehaan:cobbler:0.4.5
Michael Dehaan » Cobbler » Version: 0.4.6

cpe:2.3:a:michael_dehaan:cobbler:0.4.6
Michael Dehaan » Cobbler » Version: 0.4.7

cpe:2.3:a:michael_dehaan:cobbler:0.4.7
Michael Dehaan » Cobbler » Version: 0.4.8

cpe:2.3:a:michael_dehaan:cobbler:0.4.8
Michael Dehaan » Cobbler » Version: 0.5.0

cpe:2.3:a:michael_dehaan:cobbler:0.5.0
Michael Dehaan » Cobbler » Version: 0.6.0

cpe:2.3:a:michael_dehaan:cobbler:0.6.0
Michael Dehaan » Cobbler » Version: 0.6.1

cpe:2.3:a:michael_dehaan:cobbler:0.6.1
Michael Dehaan » Cobbler » Version: 0.6.3

cpe:2.3:a:michael_dehaan:cobbler:0.6.3
Michael Dehaan » Cobbler » Version: 0.6.4

cpe:2.3:a:michael_dehaan:cobbler:0.6.4
Michael Dehaan » Cobbler » Version: 0.6.5

cpe:2.3:a:michael_dehaan:cobbler:0.6.5
Michael Dehaan » Cobbler » Version: 0.8.1

cpe:2.3:a:michael_dehaan:cobbler:0.8.1
Michael Dehaan » Cobbler » Version: 0.8.3

cpe:2.3:a:michael_dehaan:cobbler:0.8.3
Michael Dehaan » Cobbler » Version: 1.0.0

cpe:2.3:a:michael_dehaan:cobbler:1.0.0
Michael Dehaan » Cobbler » Version: 1.0.2

cpe:2.3:a:michael_dehaan:cobbler:1.0.2
Michael Dehaan » Cobbler » Version: 1.0.2-1

cpe:2.3:a:michael_dehaan:cobbler:1.0.2-1
Michael Dehaan » Cobbler » Version: 1.0.3-1

cpe:2.3:a:michael_dehaan:cobbler:1.0.3-1
Michael Dehaan » Cobbler » Version: 1.2.0

cpe:2.3:a:michael_dehaan:cobbler:1.2.0
Michael Dehaan » Cobbler » Version: 1.2.2

cpe:2.3:a:michael_dehaan:cobbler:1.2.2
Michael Dehaan » Cobbler » Version: 1.2.3

cpe:2.3:a:michael_dehaan:cobbler:1.2.3
Michael Dehaan » Cobbler » Version: 1.2.5

cpe:2.3:a:michael_dehaan:cobbler:1.2.5
Michael Dehaan » Cobbler » Version: 1.2.6

cpe:2.3:a:michael_dehaan:cobbler:1.2.6
Michael Dehaan » Cobbler » Version: 1.2.7

cpe:2.3:a:michael_dehaan:cobbler:1.2.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-6954

Products

Pricing

Contact Us