PT-2012-1098 · Puppet+1 · Puppet+2

Published 2012-03-06 · Updated 2022-05-14 · CVE-2012-1053

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Puppet versions 2.6.x through 2.6.13 Puppet versions 2.7.x through 2.7.10 Puppet Enterprise (PE) Users versions 1.0 through 1.2.x Puppet Enterprise (PE) Users versions 2.0.x through 2.0.2

Description The issue is related to the improper management of group privileges by the change user method in the SUIDManager. This allows local users to gain privileges through various vectors, including the failure to drop supplementary groups under certain conditions, changes to the eguid without corresponding changes to the egid, or the addition of the real gid to supplementary groups. The vulnerability can lead to a breach of confidentiality, integrity, and availability of protected information and can be exploited locally.

Recommendations For Puppet versions 2.6.x through 2.6.13, update to version 2.6.14 or later. For Puppet versions 2.7.x through 2.7.10, update to version 2.7.11 or later. For Puppet Enterprise (PE) Users versions 1.0 through 1.2.x, update to a version later than 2.0.2. For Puppet Enterprise (PE) Users versions 2.0.x through 2.0.2, update to version 2.0.3 or later.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

CWE-264

Related Identifiers

BDU:2015-09427

CVE-2012-1053

DSA-2419-1

GHSA-77HG-G8CC-5R37

SUSE-SU-2012_0325-1

Affected Products

Puppet

Puppet Enterprise (Pe) Users

Suse

References · 40

• http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00003.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-1053 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-1053 · Vendor Advisory
• http://secunia.com/advisories/48166 · Vendor Advisory
• http://secunia.com/advisories/48290 · Vendor Advisory
• http://debian.org/security/2012/dsa-2419 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-1053 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09427 · Security Note
• https://hermes.opensuse.org/messages/15087408 · Vendor Advisory
• http://ubuntu.com/usn/usn-1372-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-1053 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1054 · Security Note
• http://secunia.com/advisories/48161 · Vendor Advisory
• https://debian.org/security/2012/dsa-2419 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-77hg-g8cc-5r37 · Vendor Advisory