Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-1906HistoryMay 29, 2012 - 8:55 p.m.
CVE-2012-1906
2012-05-2920:55:07
Debian Security Bug Tracker
security-tracker.debian.org
14
CVSS2
3.3
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
EPSS
0
Percentile
5.1%
Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 uses predictable file names when installing Mac OS X packages from a remote source, which allows local users to overwrite arbitrary files or install arbitrary packages via a symlink attack on a temporary file in /tmp.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 11 | all | puppet | < 2.7.13-1 | puppet_2.7.13-1_all.deb |
Related
cve
cve
CVE-2012-1906
2012-05-29 20:55:07
prion
prion
Code injection
2012-05-29 20:55:00
rubygems
rubygems
Puppet uses predictable filenames, allowing arbitrary file overwrite
2012-05-28 20:00:00
github
github
Puppet uses predictable filenames, allowing arbitrary file overwrite
2022-05-14 00:56:45
osv
osv
Puppet uses predictable filenames, allowing arbitrary file overwrite
2022-05-14 00:56:45
puppet - several
2012-04-13 00:00:00
ubuntucve
ubuntucve
CVE-2012-1906
2012-04-11 00:00:00
cvelist
cvelist
CVE-2012-1906
2012-05-29 20:00:00
nvd
nvd
CVE-2012-1906
2012-05-29 20:55:07
debian
debian
[SECURITY] [DSA 2451-1] puppet security update
2012-04-13 04:52:10
nessus
nessus
Debian DSA-2451-1 : puppet - several vulnerabilities
2012-04-16 00:00:00
Ubuntu 10.04 LTS / 11.04 / 11.10 : puppet vulnerabilities (USN-1419-1)
2012-04-11 00:00:00
GLSA-201208-02 : Puppet: Multiple vulnerabilities
2012-08-15 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2451-1)
2012-04-30 00:00:00
Debian Security Advisory DSA 2451-1 (puppet)
2012-04-30 00:00:00
FreeBSD Ports: puppet
2012-04-30 00:00:00
ubuntu
ubuntu
Puppet vulnerabilities
2012-04-11 00:00:00
freebsd
freebsd
puppet -- Multiple Vulnerabilities
2012-03-26 00:00:00
gentoo
gentoo
Puppet: Multiple vulnerabilities
2012-08-14 00:00:00
CVSS2
3.3
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:N/I:P/A:P
EPSS
0
Percentile
5.1%
Related for DEBIANCVE:CVE-2012-1906