Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2013-4969
HistoryJan 07, 2014 - 6:55 p.m.

CVE-2013-4969

2014-01-0718:55:06
Debian Security Bug Tracker
security-tracker.debian.org
17

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

EPSS

0

Percentile

5.1%

Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified files.

OSVersionArchitecturePackageVersionFilename
Debian11allpuppet< 3.4.1-1puppet_3.4.1-1_all.deb

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

EPSS

0

Percentile

5.1%