CVE-2010-2235 Cobbler is vulnerable to code injection

High 8.5 Published 9 Dec 2010 Updated 7 Aug 2024

Remote authenticated administrators can execute arbitrary code via crafted kickstart templates due to enabled Python execution in the Cheetah engine.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2010-2235?

CVE-2010-2235 is a high-severity code injection vulnerability in n/a, published on 9 Dec 2010. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

template_api.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template engine to execute Python statements contained in templates, which allows remote authenticated administrators to execute arbitrary code via a crafted kickstart template file, a different vulnerability than CVE-2008-6954.

Weakness: CWE-94

Which versions are affected by CVE-2010-2235?

3 open source packages ship an affected version, including cobbler. It affects 1 product.

Package	Affected	Fixed in
`cobbler` PyPI	All versions	`2.0.7`
`cobbler` PyPI	All versions	`2.0.7`
`cobbler` PyPI	All versions	`2.0.7`

Linux distribution packages (4)

`cobbler` Red Hat:network_satellite:5.3::el4	All versions	`0:1.6.6-15.el4sat`
`cobbler-debuginfo` Red Hat:network_satellite:5.3::el4	All versions	`0:1.6.6-15.el4sat`
`cobbler` Red Hat:network_satellite:5.3::el5	All versions	`0:1.6.6-15.el5sat`
`cobbler-debuginfo` Red Hat:network_satellite:5.3::el5	All versions	`0:1.6.6-15.el5sat`

Products include Michael Dehaan Cobbler.

How do I fix CVE-2010-2235?

Upgrade cobbler to 2.0.7 or later.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2010-2235 being exploited?

There is no known exploitation of CVE-2010-2235 in the wild and no public exploit code.

Sources

Also known as GHSA-jhm7-38xj-pvm8, PYSEC-2026-794, RHSA-2010:0775.