Nov. 15, 2023, 1:56 p.m. |

Packet Storm packetstormsecurity.com

Ubuntu Security Notice 6475-1 - It was discovered that Cobbler did not properly handle user input, which could result in an absolute path traversal. An attacker could possibly use this issue to read arbitrary files. It was discovered that Cobbler did not properly handle user input, which could result in command injection. An attacker could possibly use this issue to execute arbitrary code with high privileges.

absolute arbitrary files attacker command command injection files injection input issue notice path path traversal result security security notice ubuntu usn

Senior Vice President, Cybersecurity and Runtime Operations

@ 2U | US-MD-Lanham//US-Remote

Dreadnought Product Security Lead - Submarines

@ Rolls-Royce | Derby - Jubilee House (UK-JH)

Senior Product Security Engineer

@ Narvar | Hybrid - Bengaluru

Managing Consultant - Advisors Business Development

@ Mastercard | Mumbai, India

Principal Security Engineer

@ Highspot | Vancouver, BC

Incident Response Specialist

@ Wabtec | Bengaluru - KA - IND (ITC Greens)