Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2) Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so; or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so in puppet/confine.
References
Link | Resource |
---|---|
http://puppetlabs.com/security/cve/cve-2014-3248 | Vendor Advisory |
http://rowediness.com/2014/06/13/cve-2014-3248-a-little-problem-with-puppet/ | Exploit Technical Description |
http://secunia.com/advisories/59197 | Technical Description |
http://secunia.com/advisories/59200 | Technical Description |
http://www.securityfocus.com/bid/68035 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
No history.
Information
Published : 2014-11-16 17:59
Updated : 2024-02-28 12:20
NVD link : CVE-2014-3248
Mitre link : CVE-2014-3248
CVE.ORG link : CVE-2014-3248
JSON object : View
Products Affected
puppet
- hiera
- marionette_collective
- puppet
- facter
- puppet_enterprise
puppetlabs
- facter
CWE
CWE-17
DEPRECATED: Code