Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2009-3564

Опубликовано: 08 дек. 2008
Источник: redhat
CVSS2: 3.8

Описание

puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might allow local users to access restricted files.

Отчет

The Red Hat Security Response Team does not currently plan to fix this flaw in MRG.

Дополнительная информация

Статус:

Low
https://bugzilla.redhat.com/show_bug.cgi?id=475201puppetmasterd does not initialize supplementary groups

3.8 Low

CVSS2

Связанные уязвимости

ubuntu
около 16 лет назад

puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might allow local users to access restricted files.

nvd
около 16 лет назад

puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might allow local users to access restricted files.

debian
около 16 лет назад

puppetmasterd in puppet 0.24.6 does not reset supplementary groups whe ...

github
больше 3 лет назад

puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might allow local users to access restricted files.

fstec
почти 14 лет назад

Уязвимости операционной системы Gentoo Linux, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации

3.8 Low

CVSS2