Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4
CVSSv2

CVE-2014-3225

Published: 14/05/2014 Updated: 09/10/2018
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
VMScore: 405
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x up to and including 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cobblerd cobbler 2.6.0

cobblerd cobbler 2.4.4

cobblerd cobbler 2.4.1

cobblerd cobbler 2.4.0

cobblerd cobbler 2.4.3

cobblerd cobbler 2.4.2

Vendor Advisories

Red Hat: CVE-2014-3225
Absolute path traversal vulnerability in the web interface in Cobbler 24x through 26x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile ...

Exploits

Exploit DB: Cobbler 2.4.x < 2.6.x - Local File Inclusion
# Exploit Title: Local File Inclusion vulnerability in cobbler # Exploit author: Dolev Farhi @f1nhack # Date 07/05/2014 # Vendor homepage: wwwcobblerdorg # Affected Software version: 24x - 26x # Alerted vendor: 7514 Software Description ===================== Cobbler is a Linux installation server that allows for rapid setup of ...
Exploit DB: Cobbler 2.6.0 Arbitrary File Read
Cobbler versions 260 and below suffer from an arbitrary file read vulnerability ...

References

CWE-22http://www.osvdb.org/106759http://seclists.org/oss-sec/2014/q2/273http://packetstormsecurity.com/files/126553/Cobbler-Local-File-Inclusion.htmlhttp://www.securityfocus.com/bid/67277https://github.com/cobbler/cobbler/issues/939http://www.exploit-db.com/exploits/33252http://seclists.org/oss-sec/2014/q2/274https://www.youtube.com/watch?v=vuBaoQUFEYQ&feature=youtu.behttp://www.securityfocus.com/archive/1/532094/100/0/threadedhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/33252/https://access.redhat.com/security/cve/cve-2014-3225
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3201CVE-2024-4779CVE-2024-35090CVE-2024-5084hard-codedCVE-2024-4985HTML injectionCVE-2024-33655local file inclusion
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook