CVE-2013-4969

Опубликовано: 07 янв. 2014

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified files.

Ссылки

http://puppetlabs.com/security/cve/cve-2013-4969
Vendor Advisory
http://secunia.com/advisories/56253
Vendor Advisory
http://secunia.com/advisories/56254
Vendor Advisory
http://www.debian.org/security/2013/dsa-2831
Third Party Advisory
http://www.ubuntu.com/usn/USN-2077-1
Third Party Advisory
http://puppetlabs.com/security/cve/cve-2013-4969
Vendor Advisory
http://secunia.com/advisories/56253
Vendor Advisory
http://secunia.com/advisories/56254
Vendor Advisory
http://www.debian.org/security/2013/dsa-2831
Third Party Advisory
http://www.ubuntu.com/usn/USN-2077-1
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:puppetlabs:puppet:*:*:*:*:*:*:*:*

Версия от 3.0.0 (включая) до 3.3.2 (включая)

cpe:2.3:a:puppetlabs:puppet:*:*:*:*:*:*:*:*

Версия от 3.4.0 (включая) до 3.4.1 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*

Версия от 2.0.0 (включая) до 2.8.4 (исключая)

cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*

Версия от 3.1 (включая) до 3.1.1 (исключая)

Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*

EPSS

Процентиль: 35%

0.00428

Низкий

2.1 Low

CVSS2

Дефекты

CWE-59

Связанные уязвимости

CVE-2013-4969

ubuntu

больше 12 лет назад

Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified files.

CVE-2013-4969

redhat

больше 12 лет назад

Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified files.

CVE-2013-4969

debian

больше 12 лет назад

Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) be ...

GHSA-73jw-pjcv-9rgm

github

около 4 лет назад

Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified files.

SUSE-RU-2015:0696-1

suse-cvrf

около 12 лет назад

Security update for puppet

EPSS

Процентиль: 35%

0.00428

Низкий

2.1 Low

CVSS2

Дефекты

CWE-59