cobbler: privilege escalation
| Package(s): | cobbler | CVE #(s): | CVE-2011-1551 | ||||||||
| Created: | April 1, 2011 | Updated: | April 6, 2011 | ||||||||
| Description: | From the openSUSE advisory:
/var/log/cobbler/ directory was owned by the web service user. Access to this account could potentially be abused to corrupt files during root filesystem operations by the Cobbler daemon. | ||||||||||
| Alerts: |
| ||||||||||