CVE-2016-9605

NameCVE-2016-9605
DescriptionA flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter validation vulnerability, leading the arbitrary file reading. The flaw is triggered by navigating to a vulnerable URL via cobbler-web on a default installation.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
NVD severitymedium (attack range: remote)
Debian Bugs858844

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
cobblersource(unstable)(unfixed)medium858844

Notes

https://bugzilla.redhat.com/show_bug.cgi?id=1433950
https://bugzilla.redhat.com/show_bug.cgi?id=1399333

Search for package or bug name: Reporting problems