Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

ganeti: command execution

Package(s):

ganeti

CVE #(s):

CVE-2009-4261

Created:

December 22, 2009

Updated:

December 23, 2009

Description:

The ganeti cluster manager fails to validate the path of scripts passed to some commands, allowing local or remote users to execute arbitrary commands.

Alerts:

Debian

DSA-1959-1

2009-12-19

(Log in to post comments)