Puppet

Puppet

43 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.3

CVE-2011-3869

  • EPSS 0.04%
  • Published 27.10.2011 20:55:01
  • Last modified 11.04.2025 00:51:21

Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to overwrite arbitrary files via a symlink attack on the .k5login file.

5

CVE-2011-3848

  • EPSS 0.43%
  • Published 27.10.2011 20:55:01
  • Last modified 11.04.2025 00:51:21

Directory traversal vulnerability in Puppet 2.6.x before 2.6.10 and 2.7.x before 2.7.4 allows remote attackers to write X.509 Certificate Signing Request (CSR) to arbitrary locations via (1) a double-encoded key parameter in the URI in 2.7.x, (2) the...

3.3

CVE-2010-0156

  • EPSS 0.04%
  • Published 03.03.2010 19:30:00
  • Last modified 11.04.2025 00:51:21

Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/daemonout, (2) /tmp/puppetdoc.txt, (3) /tmp/puppetdoc.tex, or (4) /tmp/puppetdoc.aux temporary file.