Lucene search
MitreCVELIST:CVE-2012-1906HistoryMay 29, 2012 - 8:00 p.m.
CVE-2012-1906
2012-05-2920:00:00
mitre
www.cve.org
Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 uses predictable file names when installing Mac OS X packages from a remote source, which allows local users to overwrite arbitrary files or install arbitrary packages via a symlink attack on a temporary file in /tmp.
References
projects.puppetlabs.com/issues/13260
puppetlabs.com/security/cve/cve-2012-1906/
secunia.com/advisories/48743
secunia.com/advisories/48748
secunia.com/advisories/48789
ubuntu.com/usn/usn-1419-1
www.debian.org/security/2012/dsa-2451
www.securityfocus.com/bid/52975
exchange.xforce.ibmcloud.com/vulnerabilities/74793
Related
nvd
nvd
CVE-2012-1906
2012-05-29 20:55:07
prion
prion
Code injection
2012-05-29 20:55:00
github
github
Puppet uses predictable filenames, allowing arbitrary file overwrite
2022-05-14 00:56:45
cve
cve
CVE-2012-1906
2012-05-29 20:55:07
debiancve
debiancve
CVE-2012-1906
2012-05-29 20:55:07
ubuntucve
ubuntucve
CVE-2012-1906
2012-04-11 00:00:00
osv
osv
Puppet uses predictable filenames, allowing arbitrary file overwrite
2022-05-14 00:56:45
puppet - several
2012-04-13 00:00:00
openvas
openvas
Debian Security Advisory DSA 2451-1 (puppet)
2012-04-30 00:00:00
Debian: Security Advisory (DSA-2451-1)
2012-04-30 00:00:00
Ubuntu Update for puppet USN-1419-1
2012-04-13 00:00:00
debian
debian
[SECURITY] [DSA 2451-1] puppet security update
2012-04-13 04:52:10
nessus
nessus
Debian DSA-2451-1 : puppet - several vulnerabilities
2012-04-16 00:00:00
GLSA-201208-02 : Puppet: Multiple vulnerabilities
2012-08-15 00:00:00
Ubuntu 10.04 LTS / 11.04 / 11.10 : puppet vulnerabilities (USN-1419-1)
2012-04-11 00:00:00
gentoo
gentoo
Puppet: Multiple vulnerabilities
2012-08-14 00:00:00
ubuntu
ubuntu
Puppet vulnerabilities
2012-04-11 00:00:00
freebsd
freebsd
puppet -- Multiple Vulnerabilities
2012-03-26 00:00:00