PT-2010-1103 · Puppet · Puppet

Published 2010-03-03 · Updated 2022-05-02 · CVE-2010-0156

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Puppet versions 0.24.x through 0.24.8 Puppet versions 0.25.x through 0.25.1 Puppet versions prior to 2.7.11

Description The issue allows local users to exploit multiple vulnerabilities in the Puppet package, potentially leading to breaches of confidentiality, integrity, and availability of protected information. The exploitation can be carried out locally. Technical details include the possibility of a symlink attack on temporary files such as /tmp/daemonout, /tmp/puppetdoc.txt, /tmp/puppetdoc.tex, or /tmp/puppetdoc.aux.

Recommendations For Puppet versions 0.24.x through 0.24.8, update to version 0.24.9 or later to resolve the issue. For Puppet versions 0.25.x through 0.25.1, update to version 0.25.2 or later to resolve the issue. For Puppet versions prior to 2.7.11, update to version 2.7.11 or later to resolve the issue. As a temporary workaround, consider restricting access to the temporary files /tmp/daemonout, /tmp/puppetdoc.txt, /tmp/puppetdoc.tex, and /tmp/puppetdoc.aux to minimize the risk of exploitation.

Exploit

Fix

Link Following

Weakness Enumeration

CWE-264

CWE-59

Related Identifiers

BDU:2015-09427

CVE-2010-0156

GHSA-VRH7-99JH-3FMM

Affected Products

Puppet

References · 20

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puppet/CVE-2010-0156.yml · Exploit
• http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036083.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-0156 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-0156 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-vrh7-99jh-3fmm · Vendor Advisory
• http://groups.google.com/group/puppet-announce/browse_thread/thread/4401823f6cbf6087 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2010-0156 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036166.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09427 · Security Note
• http://secunia.com/advisories/38766 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2010-0156 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=502881 · Patch
• https://github.com/puppetlabs/puppet/commit/0aae57f91dc69b22fb674f8de3a13c22edd07128 · Note
• https://github.com/puppetlabs/puppet/commit/6111ba80f2c6f6d1541af971f565119e6e03d77d · Note