Approved changes feed: RSS · Atom

cpe:2.3:a:michael_dehaan:cobbler:2.0.3:*:*:*:*:*:*:*

part: a version: 2.0.3 update: *

VendorMichael Dehaan (b7f71db4-4754-5a80-b60b-4c5b70e0f973)
ProductCobbler (869a44ea-1b57-5ec3-9874-313c460e1a40)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/cobbler/cobbler purl2cpe 2026-06-01 10:14:51.323380
pkg:gitlab/redhat/cobbler purl2cpe 2026-06-01 10:14:51.323382
pkg:pypi/cobbler purl2cpe 2026-06-01 10:14:51.323383
pkg:rpm/fedora/cobbler purl2cpe 2026-06-01 10:14:51.323385
pkg:rpm/opensuse/cobbler purl2cpe 2026-06-01 10:14:51.323386
pkg:sourceforge/cobbler.mirror purl2cpe 2026-06-01 10:14:51.323387

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-4512 vulnerable 2026-06-08 04:56:28.837893 Details available
Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveraging world writable permissions for files and directories.
Published: 2010-12-09T19:00:00.000Z
Updated: 2024-08-07T03:51:17.020Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2235 vulnerable 2026-06-08 04:54:12.390950 Details available
template_api.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template engine to execute Python statements contained in templates, which allows remote authenticated administrators to execute arbitrary code via a crafted kickstart template file, a different vulnerability than CVE-2008-6954.
Published: 2010-12-09T19:00:00.000Z
Updated: 2024-08-07T02:25:07.514Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.