PT-2011-1171 · Puppet · Puppet

Published 2011-10-27 · Updated 2022-05-14 · CVE-2011-3871

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Puppet versions 2.7.x prior to 2.7.5 Puppet versions 2.6.x prior to 2.6.11 Puppet version 0.25.x

Description The issue allows local users to run arbitrary Puppet code or trick a user into editing arbitrary files due to the use of a predictable file name when running in --edit mode. This can lead to a violation of confidentiality, integrity, and availability of protected information. The exploitation of the issue can be carried out locally.

Recommendations For Puppet versions 2.7.x prior to 2.7.5, update to version 2.7.5 or later. For Puppet versions 2.6.x prior to 2.6.11, update to version 2.6.11 or later. For Puppet version 0.25.x, consider upgrading to a newer version that is not affected by this issue, as 0.25.x is outdated and may pose additional security risks. As a temporary workaround, consider avoiding the use of the --edit mode until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-340

CWE-264

Related Identifiers

BDU:2015-09427

CVE-2011-3871

DSA-2314-1

GHSA-MPMX-GM5V-Q789

Affected Products

Puppet

References · 20

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puppet/CVE-2011-3871.yml · Exploit
• http://ubuntu.com/usn/USN-1223-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-mpmx-gm5v-q789 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-3871 · Vendor Advisory
• http://ubuntu.com/usn/USN-1223-2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-3871 · Vendor Advisory
• http://debian.org/security/2011/dsa-2314 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-3871 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2011-3871 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09427 · Security Note
• http://secunia.com/advisories/46458 · Vendor Advisory
• http://groups.google.com/group/puppet-announce/browse_thread/thread/91e3b46d2328a1cb · Patch
• https://github.com/puppetlabs/puppet/commit/343c7bd381b63e042d437111718918f951d9b30d · Note
• https://github.com/puppetlabs/puppet/commit/d76c30935460ded953792dfe49f72b8c5158e899 · Note
• https://github.com/puppetlabs/puppet · Note