Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

puppet puppet 0.25.5 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-3869
Puppet 2.7.x prior to 2.7.5, 2.6.x prior to 2.6.11, and 0.25.x allows local users to overwrite arbitrary files via a symlink attack on the .k5login file.
Puppetlabs Puppet 2.7.0Puppet Puppet 2.7.3Puppet Puppet 2.6.1Puppet Puppet 2.6.8Puppet Puppet 2.7.2Puppetlabs Puppet 2.7.1Puppet Puppet 2.6.3Puppet Puppet 2.6.2Puppet Puppet 2.6.9Puppet Puppet 2.6.4Puppet Puppet 2.6.5Puppet Puppet 2.6.10Puppet Puppet 2.7.4Puppet Puppet 2.6.0Puppet Puppet 2.6.7Puppet Puppet 2.6.6Puppet Puppet 0.25.1Puppet Puppet 0.25.2Puppet Puppet 0.25.3Puppet Puppet 0.25.0Puppet Puppet 0.25.6Puppet Puppet 0.25.4
NA
CVE-2011-3870
Puppet 2.7.x prior to 2.7.5, 2.6.x prior to 2.6.11, and 0.25.x allows local users to modify the permissions of arbitrary files via a symlink attack on the SSH authorized_keys file.
Puppetlabs Puppet 2.7.0Puppet Puppet 2.7.4Puppet Puppet 2.6.2Puppet Puppet 2.6.1Puppet Puppet 2.7.2Puppetlabs Puppet 2.7.1Puppet Puppet 2.6.4Puppet Puppet 2.6.3Puppet Puppet 2.6.10Puppet Puppet 2.6.0Puppet Puppet 2.6.6Puppet Puppet 2.6.5Puppet Puppet 2.7.3Puppet Puppet 2.6.9Puppet Puppet 2.6.8Puppet Puppet 2.6.7Puppet Puppet 0.25.3Puppet Puppet 0.25.2Puppet Puppet 0.25.4Puppet Puppet 0.25.5Puppet Puppet 0.25.1Puppet Puppet 0.25.0
NA
CVE-2011-3871
Puppet 2.7.x prior to 2.7.5, 2.6.x prior to 2.6.11, and 0.25.x, when running in --edit mode, uses a predictable file name, which allows local users to run arbitrary Puppet code or trick a user into editing arbitrary files.
Puppet Puppet 2.7.2Puppetlabs Puppet 2.7.1Puppet Puppet 2.6.4Puppet Puppet 2.6.3Puppet Puppet 2.6.10Puppet Puppet 2.6.0Puppet Puppet 2.6.6Puppet Puppet 2.6.5Puppetlabs Puppet 2.7.0Puppet Puppet 2.7.4Puppet Puppet 2.6.2Puppet Puppet 2.6.1Puppet Puppet 2.7.3Puppet Puppet 2.6.9Puppet Puppet 2.6.8Puppet Puppet 2.6.7Puppet Puppet 0.25.4Puppet Puppet 0.25.5Puppet Puppet 0.25.3Puppet Puppet 0.25.2Puppet Puppet 0.25.1Puppet Puppet 0.25.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook