CVE-2013-4969

Опубликовано: 07 янв. 2014

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified files.

Ссылки

http://puppetlabs.com/security/cve/cve-2013-4969
Vendor Advisory
http://secunia.com/advisories/56253
Vendor Advisory
http://secunia.com/advisories/56254
Vendor Advisory
http://www.debian.org/security/2013/dsa-2831
Third Party Advisory
http://www.ubuntu.com/usn/USN-2077-1
Third Party Advisory
http://puppetlabs.com/security/cve/cve-2013-4969
Vendor Advisory
http://secunia.com/advisories/56253
Vendor Advisory
http://secunia.com/advisories/56254
Vendor Advisory
http://www.debian.org/security/2013/dsa-2831
Third Party Advisory
http://www.ubuntu.com/usn/USN-2077-1
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:puppetlabs:puppet:*:*:*:*:*:*:*:*

Версия от 3.0.0 (включая) до 3.3.2 (включая)

cpe:2.3:a:puppetlabs:puppet:*:*:*:*:*:*:*:*

Версия от 3.4.0 (включая) до 3.4.1 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*

Версия от 2.0.0 (включая) до 2.8.4 (исключая)

cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*

Версия от 3.1 (включая) до 3.1.1 (исключая)

Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*

EPSS

Процентиль: 11%

0.00038

Низкий

2.1 Low

CVSS2

Дефекты

CWE-59

Связанные уязвимости

CVE-2013-4969

ubuntu

около 12 лет назад

Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified files.

CVE-2013-4969

redhat

около 12 лет назад

Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified files.

CVE-2013-4969

debian

около 12 лет назад

Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) be ...

GHSA-73jw-pjcv-9rgm

github

больше 3 лет назад

Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified files.

SUSE-RU-2015:0696-1

suse-cvrf

больше 11 лет назад

Security update for puppet

EPSS

Процентиль: 11%

0.00038

Низкий

2.1 Low

CVSS2

Дефекты

CWE-59