|
|
| |
|
| |
puppet: multiple vulnerabilities
| Package(s): | puppet |
CVE #(s): | CVE-2013-4761
CVE-2013-4956
|
| Created: | August 16, 2013 |
Updated: | September 20, 2013 |
| Description: |
From the Ubuntu advisory:
It was discovered that Puppet incorrectly handled the resource_type service. A local attacker on the master could use this issue to execute arbitrary Ruby files. (CVE-2013-4761)
It was discovered that Puppet incorrectly handled permissions on the modules it installed. Modules could be installed with the permissions that existed when they were built, possibly exposing them to a local attacker. (CVE-2013-4956) |
| Alerts: |
|
( Log in to post comments)
|
|
|