CVE-2010-0156
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2010-0156
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2010-0156.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2010-0156
- Aliases
- Published
- 2010-03-03T19:30:00Z
- Modified
- 2024-09-18T01:00:21Z
- Summary
- [none]
- Details
-
Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/daemonout, (2) /tmp/puppetdoc.txt, (3) /tmp/puppetdoc.tex, or (4) /tmp/puppetdoc.aux temporary file.
- References
-
- http://secunia.com/advisories/38766
- http://groups.google.com/group/puppet-announce/browse_thread/thread/4401823f6cbf6087
- https://bugzilla.redhat.com/show_bug.cgi?id=502881
- http://groups.google.com/group/puppet-announce/browse_thread/thread/73cd1b2896d986c2
- http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036083.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036166.html
- http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
- https://puppet.com/security/cve/cve-2010-0156
- https://security-tracker.debian.org/tracker/CVE-2010-0156
Affected packages
Debian:11 / puppet
Package
- Name
- puppet
- Purl
- pkg:deb/debian/puppet?arch=source