CVE - CVE-2012-1053

CVE-ID
CVE-2012-1053	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:52158 URL:http://www.securityfocus.com/bid/52158 CONFIRM:http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.14 CONFIRM:http://puppetlabs.com/security/cve/cve-2012-1053/ DEBIAN:DSA-2419 URL:http://www.debian.org/security/2012/dsa-2419 MISC:http://projects.puppetlabs.com/issues/12457 MISC:http://projects.puppetlabs.com/issues/12458 MISC:http://projects.puppetlabs.com/issues/12459 OSVDB:79495 URL:http://www.osvdb.org/79495 SECUNIA:48157 URL:http://secunia.com/advisories/48157 SECUNIA:48161 URL:http://secunia.com/advisories/48161 SECUNIA:48166 URL:http://secunia.com/advisories/48166 SECUNIA:48290 URL:http://secunia.com/advisories/48290 SUSE:SUSE-SU-2012:0325 URL:http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00003.html SUSE:openSUSE-SU-2012:0835 URL:https://hermes.opensuse.org/messages/15087408 UBUNTU:USN-1372-1 URL:http://ubuntu.com/usn/usn-1372-1 XF:puppet-forked-priv-escalation(73445) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/73445
Assigning CNA
MITRE Corporation
Date Record Created
20120213	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20120213)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is a record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)