CVE-2011-3870

Published: Oct 27, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to modify the permissions of arbitrary files via a symlink attack on the SSH authorized_keys file.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

FEDORA-2011-13633

vendor-advisory

x_refsource_FEDORA

https://puppet.com/security/cve/cve-2011-3870

x_refsource_CONFIRM

FEDORA-2011-13623

vendor-advisory

x_refsource_FEDORA

DSA-2314

vendor-advisory

x_refsource_DEBIAN

46458

third-party-advisory

x_refsource_SECUNIA

FEDORA-2011-13636

vendor-advisory

x_refsource_FEDORA

http://groups.google.com/group/puppet-announce/browse_thread/thread/91e3b46d2328a1cb

x_refsource_CONFIRM

USN-1223-1

vendor-advisory

x_refsource_UBUNTU

USN-1223-2

vendor-advisory

x_refsource_UBUNTU

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2011-3870

Description

Affected Products

References