What’s Vulnerable › Vulnerabilities

CVE-2010-4512

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2010-12-09 · updated 2026-06-16
• Weakness: CWE-264

Description

Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveraging world writable permissions for files and directories.

Affected products

• Michael Dehaan Cobbler: through 2.0.3.1-2; 0.1.1.7, 0.2.1, 0.2.2, 0.2.3, 0.2.5, 0.2.7 (+73)

References

• http://people.fedoraproject.org/~shenson/cobbler/cobbler-2.0.8.tar.gz
• http://secunia.com/advisories/42602
• https://bugzilla.redhat.com/show_bug.cgi?id=554567
• http://people.fedoraproject.org/~shenson/cobbler/cobbler-2.0.8.tar.gz
• http://secunia.com/advisories/42602
• https://bugzilla.redhat.com/show_bug.cgi?id=554567

Get alerted when CVE-2010-4512 or the next vulnerability affects your stack