CVE-2009-4261

Related Files

Debian Linux Security Advisory 1959-1

Posted Dec 21, 2009

Authored by Debian | Site debian.org

Debian Linux Security Advisory 1959-1 - It was discovered that ganeti, a virtual server cluster manager, does not validate the path of scripts passed as arguments to certain commands, which allows local or remote users (via the web interface in versions 2.x) to execute arbitrary commands on a host acting as a cluster master.

tags | advisory, remote, web, arbitrary, local

systems | linux, debian

advisories | CVE-2009-4261

SHA-256 | 9de7728afbdb40275675ed1ab9d19384cb604d7333cdcd1f40f042ca1954497f

Download | Favorite | View

Open Source CERT Security Advisory 2009.19

Posted Dec 17, 2009

Authored by Andrea Barisani, Open Source CERT | Site ocert.org

Ganeti versions greater than and equal to 1.2.9, 2.0.5, and 2.1.0-rc2 suffer from an arbitrary code execution vulnerability.

tags | advisory, arbitrary, code execution

advisories | CVE-2009-4261

SHA-256 | 38ad9fb8176a29c49ef7d6bc05a8b7d39a8a5f0fd8c68eab4b4ac8fe36fc89c9

Download | Favorite | View