Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2012-1054HistoryMay 29, 2012 - 8:55 p.m.
CVE-2012-1054
2012-05-2920:55:00
Debian Security Bug Tracker
security-tracker.debian.org
8
4.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
9.3%
Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3, when managing a user login file with the k5login resource type, allows local users to gain privileges via a symlink attack on .k5login.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 11 | all | puppet | < 2.7.11-1 | puppet_2.7.11-1_all.deb |
| Debian | 10 | all | puppet | < 2.7.11-1 | puppet_2.7.11-1_all.deb |
Related
cve
cve
CVE-2012-1054
2012-05-29 20:55:00
prion
prion
Design/Logic Flaw
2012-05-29 20:55:00
ubuntucve
ubuntucve
CVE-2012-1054
2012-02-23 00:00:00
nessus
nessus
Fedora 17 : puppet-2.6.14-1.fc17 (2012-2325)
2012-03-12 00:00:00
Fedora 15 : puppet-2.6.14-1.fc15 (2012-2367)
2012-03-12 00:00:00
Amazon Linux AMI : puppet (ALAS-2012-53)
2013-09-04 00:00:00
debian
debian
[BSA-065] Security Update for puppet
2012-03-21 15:12:26
[SECURITY] [DSA 2419-1] puppet security update
2012-02-27 19:46:42
securityvulns
securityvulns
Puppet security vulnerabilities
2012-03-09 00:00:00
[SECURITY] [DSA 2419-1] puppet security update
2012-03-09 00:00:00
openvas
openvas
Debian Security Advisory DSA 2419-1 (puppet)
2012-03-12 00:00:00
Ubuntu Update for puppet USN-1372-1
2012-03-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2012:0325-1)
2021-06-09 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: puppet-2.6.14-1.fc17
2012-03-11 17:02:10
[SECURITY] Fedora 16 Update: puppet-2.6.14-1.fc16
2012-03-10 21:52:57
[SECURITY] Fedora 16 Update: puppet-2.6.16-1.fc16
2012-04-27 05:51:26
osv
osv
puppet - several
2012-02-27 00:00:00
ubuntu
ubuntu
Puppet vulnerabilities
2012-02-23 00:00:00
suse
suse
Security update for puppet (important)
2012-03-06 22:08:33
amazon
amazon
Medium: puppet
2012-03-15 19:11:00
gentoo
gentoo
Puppet: Multiple vulnerabilities
2012-03-06 00:00:00
4.4 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
9.3%
Related for DEBIANCVE:CVE-2012-1054