CVE-2010-0156
Published Mar 3, 2010
Last updated 7 years ago
Overview
- Description
- Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/daemonout, (2) /tmp/puppetdoc.txt, (3) /tmp/puppetdoc.tex, or (4) /tmp/puppetdoc.aux temporary file.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 3.3
- Impact score
- 4.9
- Exploitability score
- 3.4
- Vector string
- AV:L/AC:M/Au:N/C:N/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-59
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:puppet:puppet:0.24.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0C04313-1D0B-42A5-95D3-0993B290073E"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:0.24.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "670B5AB8-5F6A-43F4-B1A3-42F041D18436"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:0.24.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D67D1460-9530-4747-8D0D-E59A0BEF60DC"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:0.24.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64C04B29-6942-410D-9695-1E727DDB109E"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:0.24.6:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA12A441-261F-46E0-B22A-3E54325E13ED"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:0.24.6:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2CCD5F9-F757-4DD1-8236-182965290C85"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:0.24.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "862C2179-B5E2-45F5-9F2C-3161C6C7F081"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:0.24.7:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72286F10-7B49-4BED-B0DF-20A006F103D3"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:0.24.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "143D014E-3454-476B-8868-DB383B716B55"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:0.24.8:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2EE099D4-6BE5-4142-8AA2-F4D5E4B7BA87"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:0.25.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "52C34E71-CDCA-469E-85FD-316010553708"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:0.25.0:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3AAF7D3D-AB39-4DE7-9532-5E4536E11A83"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:0.25.0:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D55E19D9-3BB5-4142-A730-C6F581C7FBA6"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:0.25.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B6780C8-A138-4470-A533-9C3A922B0A3C"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:0.25.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF3FF502-48C2-4836-8CBD-BBD82635D1A7"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:0.25.1:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C31B9F0A-FE81-4140-9517-374B34016F22"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:0.25.1:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70AD7D56-2BA0-4B3A-9B4E-37A2393C5109"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:0.25.2:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E187EA82-BFE4-486A-81D9-63277D9F2A3B"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:0.25.2:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54C2F856-E1A6-4B62-BCB3-F04AD44FBDCD"
},
{
"criteria": "cpe:2.3:a:puppet:puppet:0.25.2:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6CAA9DE-80F9-46BE-871A-50E214D1F3B6"
}
],
"operator": "OR"
}
]
}
]