Puppet vulnerability

2014-01-0600:00:00

ubuntu.com

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.3

Confidence

Low

EPSS

Percentile

5.1%

JSON

Releases

Ubuntu 13.10
Ubuntu 13.04
Ubuntu 12.10
Ubuntu 12.04

Packages

puppet - Centralized configuration management

Details

It was discovered that Puppet incorrectly handled temporary files. A local
attacker could possibly use this issue to overwrite arbitrary files. In the
default installation of Ubuntu, this should be prevented by the Yama link
restrictions.

OSVersionArchitecturePackageVersionFilename
Ubuntu13.10noarchpuppet-common< 3.2.4-2ubuntu2.2UNKNOWN
Ubuntu13.10noarchpuppet< 3.2.4-2ubuntu2.2UNKNOWN
Ubuntu13.10noarchpuppet-el< 3.2.4-2ubuntu2.2UNKNOWN
Ubuntu13.10noarchpuppet-testsuite< 3.2.4-2ubuntu2.2UNKNOWN
Ubuntu13.10noarchpuppetmaster< 3.2.4-2ubuntu2.2UNKNOWN
Ubuntu13.10noarchpuppetmaster-common< 3.2.4-2ubuntu2.2UNKNOWN
Ubuntu13.10noarchpuppetmaster-passenger< 3.2.4-2ubuntu2.2UNKNOWN
Ubuntu13.10noarchvim-puppet< 3.2.4-2ubuntu2.2UNKNOWN
Ubuntu13.04noarchpuppet-common< 2.7.18-4ubuntu1.3UNKNOWN
Ubuntu13.04noarchpuppet< 2.7.18-4ubuntu1.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	13.10	noarch	puppet-common	< 3.2.4-2ubuntu2.2	UNKNOWN
Ubuntu	13.10	noarch	puppet	< 3.2.4-2ubuntu2.2	UNKNOWN
Ubuntu	13.10	noarch	puppet-el	< 3.2.4-2ubuntu2.2	UNKNOWN
Ubuntu	13.10	noarch	puppet-testsuite	< 3.2.4-2ubuntu2.2	UNKNOWN
Ubuntu	13.10	noarch	puppetmaster	< 3.2.4-2ubuntu2.2	UNKNOWN
Ubuntu	13.10	noarch	puppetmaster-common	< 3.2.4-2ubuntu2.2	UNKNOWN
Ubuntu	13.10	noarch	puppetmaster-passenger	< 3.2.4-2ubuntu2.2	UNKNOWN
Ubuntu	13.10	noarch	vim-puppet	< 3.2.4-2ubuntu2.2	UNKNOWN
Ubuntu	13.04	noarch	puppet-common	< 2.7.18-4ubuntu1.3	UNKNOWN
Ubuntu	13.04	noarch	puppet	< 2.7.18-4ubuntu1.3	UNKNOWN