Puppet vulnerability

2011-09-2900:00:00

ubuntu.com

6.2 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.006 Low

EPSS

Percentile

77.7%

JSON

Releases

Ubuntu 11.04
Ubuntu 10.10
Ubuntu 10.04

Packages

puppet - centralised configuration management for networks

Details

Kristian Erik Hermansen discovered a directory traversal vulnerability in
the SSLFile indirection base class. A remote attacker could exploit this to
overwrite files with the privileges of the Puppet Master.

OSVersionArchitecturePackageVersionFilename
Ubuntu11.04noarchpuppet-common< 2.6.4-2ubuntu2.2UNKNOWN
Ubuntu11.04noarchpuppet< 2.6.4-2ubuntu2.2UNKNOWN
Ubuntu11.04noarchpuppet-el< 2.6.4-2ubuntu2.2UNKNOWN
Ubuntu11.04noarchpuppet-testsuite< 2.6.4-2ubuntu2.2UNKNOWN
Ubuntu11.04noarchpuppetmaster< 2.6.4-2ubuntu2.2UNKNOWN
Ubuntu11.04noarchpuppetmaster-common< 2.6.4-2ubuntu2.2UNKNOWN
Ubuntu11.04noarchpuppetmaster-passenger< 2.6.4-2ubuntu2.2UNKNOWN
Ubuntu11.04noarchvim-puppet< 2.6.4-2ubuntu2.2UNKNOWN
Ubuntu10.10noarchpuppet-common< 2.6.1-0ubuntu2.1UNKNOWN
Ubuntu10.10noarchpuppet< 2.6.1-0ubuntu2.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	11.04	noarch	puppet-common	< 2.6.4-2ubuntu2.2	UNKNOWN
Ubuntu	11.04	noarch	puppet	< 2.6.4-2ubuntu2.2	UNKNOWN
Ubuntu	11.04	noarch	puppet-el	< 2.6.4-2ubuntu2.2	UNKNOWN
Ubuntu	11.04	noarch	puppet-testsuite	< 2.6.4-2ubuntu2.2	UNKNOWN
Ubuntu	11.04	noarch	puppetmaster	< 2.6.4-2ubuntu2.2	UNKNOWN
Ubuntu	11.04	noarch	puppetmaster-common	< 2.6.4-2ubuntu2.2	UNKNOWN
Ubuntu	11.04	noarch	puppetmaster-passenger	< 2.6.4-2ubuntu2.2	UNKNOWN
Ubuntu	11.04	noarch	vim-puppet	< 2.6.4-2ubuntu2.2	UNKNOWN
Ubuntu	10.10	noarch	puppet-common	< 2.6.1-0ubuntu2.1	UNKNOWN
Ubuntu	10.10	noarch	puppet	< 2.6.1-0ubuntu2.1	UNKNOWN