CVEvulnerability

CVE-2013-4969

2.1 LOW Published 2014-01-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2014-01-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-59

Description

Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified files.

Affected configurations

• puppetlabs puppet (>= 3.0.0 <= 3.3.2) • puppetlabs puppet (>= 3.4.0 < 3.4.1) • puppet puppet enterprise (>= 2.0.0 < 2.8.4) • puppet puppet enterprise (>= 3.1 < 3.1.1) • debian debian linux 6.0 • debian debian linux 7.0 • debian debian linux 8.0 • canonical ubuntu linux 12.04 • canonical ubuntu linux 12.10 • canonical ubuntu linux 13.04 • canonical ubuntu linux 13.10

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References