CVE-2012-3537

The Crowbar Ohai plugin (chef/cookbooks/ohai/files/default/plugins/crowbar.rb) in the Deployer Barclamp in Crowbar, possibly 1.4 and earlier, allows local users to execute arbitrary shell commands via vectors related to "insecure handling of tmp files" and predictable file names.

CVSS v2.0 NVD

4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.59% chance of exploitation in the next 30 days, 47th percentile

Published

2012-09-05

Updated

2024-08-06

Proof-of-concept exploits (1)

• SUSE-Cloud/barclamp-deployer/commit/5ea8d4ddaa4cb1ce834d36889f0fe7ac0d617bc8

Security advisories

• http://secunia.com/advisories/50442
• http://www.securityfocus.com/bid/55240

References

• CVE Record
• NVD entry

Related

• CVE-2012-3551