CVE

Id
42740  
CVE No.
CVE-2010-0156  
Status
Candidate  
Description
Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/daemonout, (2) /tmp/puppetdoc.txt, (3) /tmp/puppetdoc.tex, or (4) /tmp/puppetdoc.aux temporary file.  
Phase
Assigned (20100104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
465700 42740 CVE-2010-0156 MLIST:[puppet-announce] 20100105 ANNOUNCE: Puppet 0.25.2 "Zoe" now available!  View
465701 42740 CVE-2010-0156 URL:http://groups.google.com/group/puppet-announce/browse_thread/thread/4401823f6cbf6087  View
465702 42740 CVE-2010-0156 MLIST:[puppet-announce] 20100108 ANNOUNCE: Puppet 0.24.9 is available  View
465703 42740 CVE-2010-0156 URL:http://groups.google.com/group/puppet-announce/browse_thread/thread/73cd1b2896d986c2  View
465704 42740 CVE-2010-0156 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=502881  View
465705 42740 CVE-2010-0156 FEDORA:FEDORA-2010-1079  View
465706 42740 CVE-2010-0156 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036083.html  View
465707 42740 CVE-2010-0156 FEDORA:FEDORA-2010-1372  View
465708 42740 CVE-2010-0156 URL:http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036166.html  View
465709 42740 CVE-2010-0156 SUSE:SUSE-SR:2010:013  View
465710 42740 CVE-2010-0156 URL:http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html  View
465711 42740 CVE-2010-0156 SECUNIA:38766  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
35349 JVNDB-2010-001129 Mozilla Firefox/SeaMonkey の Web ワーカー機能における任意のコードを実行される脆弱性 Mozilla Firefox/SeaMonkey の Web ワーカー機能には、ポストメッセージ用の配列のデータ型を適切に処理しないため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-0160 42740 10 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001129.html  View