Lucene search

CVE-2010-0156

🗓️ 03 Mar 2010 00:00:00Reported by ubuntu.comType

Puppet versions 0.24.x and 0.25.x allows local users to overwrite arbitrary files via symlink attack on temporary file

Reporter	Title	Published	Views	Family All 29
Tenable Nessus	openSUSE Security Update : puppet (openSUSE-SU-2010:0306-1)	2 Jun 201000:00	–	nessus
Tenable Nessus	openSUSE Security Update : puppet (openSUSE-SU-2010:0306-1)	2 Jun 201000:00	–	nessus
Tenable Nessus	Fedora 12 : puppet-0.25.4-1.fc12 (2010-1372)	1 Jul 201000:00	–	nessus
Tenable Nessus	SuSE 11 Security Update : puppet (SAT Patch Number 2113)	2 Dec 201000:00	–	nessus
Tenable Nessus	Fedora 11 : puppet-0.25.4-1.fc11 (2010-1079)	1 Jul 201000:00	–	nessus
Tenable Nessus	Ubuntu 9.10 : puppet vulnerabilities (USN-917-1)	25 Mar 201000:00	–	nessus
Tenable Nessus	GLSA-201203-03 : Puppet: Multiple vulnerabilities	6 Mar 201200:00	–	nessus
OpenVAS	Fedora Update for puppet FEDORA-2010-1079	5 Mar 201000:00	–	openvas
OpenVAS	Fedora Update for puppet FEDORA-2010-1372	5 Mar 201000:00	–	openvas
OpenVAS	Fedora Update for puppet FEDORA-2010-1079	5 Mar 201000:00	–	openvas

Source	Link
groups	www.groups.google.com/group/puppet-announce/browse_thread/thread/4401823f6cbf6087
groups	www.groups.google.com/group/puppet-announce/browse_thread/thread/73cd1b2896d986c2
ubuntu	www.ubuntu.com/security/notices/USN-917-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2010-0156
launchpad	www.launchpad.net/bugs/cve/CVE-2010-0156
security-tracker	www.security-tracker.debian.org/tracker/CVE-2010-0156

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	9.10	noarch	puppet	0.24.8-2ubuntu4.1	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

03 Mar 2010 00:00Current

3.9Low risk

Vulners AI Score3.9

CVSS23.3

EPSS0.000