PT-2012-1143 · Puppet+1 · Puppet Enterprise (Pe) Users+2

Published 2012-05-29 · Updated 2024-02-02 · CVE-2012-1988

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Puppet versions 2.6.x through 2.6.14 Puppet versions 2.7.x through 2.7.12 Puppet Enterprise (PE) Users versions 1.0 through 1.2.x Puppet Enterprise (PE) Users versions 2.0.x through 2.5.0

Description The issue allows remote authenticated users with agent SSL keys and file-creation permissions on the puppet master to execute arbitrary commands. This can be achieved by creating a file whose full pathname contains shell metacharacters, then performing a filebucket request. Exploitation of the issue may lead to a violation of confidentiality, integrity, and availability of protected information.

Recommendations For Puppet versions 2.6.x through 2.6.14, update to version 2.6.15 or later. For Puppet versions 2.7.x through 2.7.12, update to version 2.7.13 or later. For Puppet Enterprise (PE) Users versions 1.0 through 1.2.x, update to a version after 2.5.1. For Puppet Enterprise (PE) Users versions 2.0.x through 2.5.0, update to version 2.5.1 or later. As a temporary workaround, consider restricting file-creation permissions on the puppet master to minimize the risk of exploitation.

Exploit

Fix

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

CWE-264

Related Identifiers

BDU:2015-09668

CVE-2012-1988

DSA-2451-1

GHSA-6XXQ-J39W-G3F6

Affected Products

Puppet

Puppet Enterprise (Pe) Users

Suse

References · 38

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puppet/CVE-2012-1988.yml · Exploit
• https://hermes.opensuse.org/messages/15087408 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079227.html · Vendor Advisory
• http://ubuntu.com/usn/usn-1419-1 · Vendor Advisory
• http://secunia.com/advisories/48789 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-1988 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079289.html · Vendor Advisory
• http://debian.org/security/2012/dsa-2451 · Vendor Advisory
• http://secunia.com/advisories/49136 · Vendor Advisory
• http://projects.puppetlabs.com/issues/13518 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09668 · Security Note
• https://osv.dev/vulnerability/CVE-2012-1988 · Vendor Advisory
• http://secunia.com/advisories/48743 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080003.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-1988 · Vendor Advisory