Cobbler is prone to a remote command-injection vulnerability. Attackers can exploit this issue to execute arbitrary commands in the context of the affected application.

Updates are available. Please see the references for more information.

• http://freshmeat.net/projects/cobbler
• http://www.securityfocus.com/bid/53666
• https://bugs.launchpad.net/ubuntu/+source/cobbler/+bug/978999
• https://github.com/cobbler/cobbler/commit/6d9167e5da44eca56bdf42b5776097a6779aaadf
• https://github.com/cobbler/cobbler/issues/141

---

Updated on 2015-03-25