PT-2012-1140 · Puppet+1 · Puppet+2

Published 2012-05-29 · Updated 2022-05-14 · CVE-2012-1906

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Puppet versions 2.6.x through 2.6.14 Puppet versions 2.7.x through 2.7.12 Puppet Enterprise (PE) Users versions 1.0 through 1.2.x Puppet Enterprise (PE) Users versions 2.0.x through 2.5.0

Description The issue affects the confidentiality, integrity, and availability of protected information. Exploitation can be carried out remotely by an attacker who has passed the authentication procedure. It involves using predictable file names when installing Mac OS X packages from a remote source, allowing local users to overwrite arbitrary files or install arbitrary packages via a symlink attack on a temporary file in /tmp.

Recommendations For Puppet versions 2.6.x through 2.6.14, update to version 2.6.15 or later. For Puppet versions 2.7.x through 2.7.12, update to version 2.7.13 or later. For Puppet Enterprise (PE) Users versions 1.0 through 1.2.x, update to a version later than 2.5.0, specifically version 2.5.1 or later. For Puppet Enterprise (PE) Users versions 2.0.x through 2.5.0, update to version 2.5.1 or later. As a temporary workaround, consider restricting access to the package installation feature to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-377

CWE-264

Related Identifiers

BDU:2015-09668

CVE-2012-1906

DSA-2451-1

GHSA-C4MC-49HQ-Q275

Affected Products

Macos X

Puppet

Puppet Enterprise (Pe) Users

References · 21

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puppet/CVE-2012-1906.yml · Exploit
• http://puppetlabs.com/security/cve/cve-2012-1906 · Vendor Advisory
• http://ubuntu.com/usn/usn-1419-1 · Vendor Advisory
• https://ubuntu.com/usn/usn-1419-1 · Vendor Advisory
• http://debian.org/security/2012/dsa-2451 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-1906 · Security Note
• http://secunia.com/advisories/48789 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09668 · Security Note
• http://projects.puppetlabs.com/issues/13260 · Vendor Advisory
• http://secunia.com/advisories/48748 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-1906 · Vendor Advisory
• https://debian.org/security/2012/dsa-2451 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-1906 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-c4mc-49hq-q275 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-1906 · Vendor Advisory