NVD

Id
11253  
Name
CVE-2011-4953  
Description
The set_mgmt_parameters function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the yaml.load function instead of the yaml.safe_load function, as demonstrated using Puppet.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2014-10-26  
Modified Date
2014-10-28  
Seq
2011-4953  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
62284 11253 CVE-2011-4953 SUSE-SU-2012:0552  View
62285 11253 CVE-2011-4953 https://bugs.launchpad.net/ubuntu/oneiric/+source/cobbler/+bug/858883  View
62286 11253 CVE-2011-4953 https://bugzilla.novell.com/show_bug.cgi?id=757062  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35100 JVNDB-2011-005342 Cobbler の item.py の set_mgmt_parameters 関数における任意のコードを実行される脆弱性 Cobbler の item.py の set_mgmt_parameters 関数には、yaml.safe_load 関数の代わりの yaml.load 関数の使用に関する処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2011-4953 52860 CVE-2011-4953 11253 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005342.html 2011-11-15 2014-10-29 View