puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might allow local users to access restricted files.
Debian Bug report logs -
#551073
CVE-2009-3564: does not reset supplementary groups when it switches to a different user
Package:
puppet;
Maintainer for puppet is Puppet Package Maintainers <pkg-puppet-devel@listsaliothdebianorg>; Source for puppet is src:puppet (PTS, buildd, popcon)
Reported by: Giuseppe Iuculano <iuc ...
It was discovered that Puppet did not drop supplementary groups when being
run as a different user A local user may be able to use this flaw to
bypass security restrictions and gain access to restricted files
(CVE-2009-3564) ...
Vulmon