Описание
Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/daemonout, (2) /tmp/puppetdoc.txt, (3) /tmp/puppetdoc.tex, or (4) /tmp/puppetdoc.aux temporary file.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | not-affected | 0.25.4-2ubuntu3 |
| hardy | ignored | end of life |
| intrepid | ignored | end of life, was needed |
| jaunty | ignored | end of life |
| karmic | released | 0.24.8-2ubuntu4.1 |
| lucid | not-affected | 0.25.4-2ubuntu3 |
| maverick | not-affected | 0.25.4-2ubuntu3 |
| natty | not-affected | 0.25.4-2ubuntu3 |
| oneiric | not-affected | 0.25.4-2ubuntu3 |
Показывать по
3.3 Low
CVSS2
Связанные уязвимости
Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/daemonout, (2) /tmp/puppetdoc.txt, (3) /tmp/puppetdoc.tex, or (4) /tmp/puppetdoc.aux temporary file.
Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local user ...
Уязвимости операционной системы Gentoo Linux, позволяющие злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
3.3 Low
CVSS2