CVE

Id
64708  
CVE No.
CVE-2013-4761  
Status
Candidate  
Description
Unspecified vulnerability in Puppet 2.7.x before 2.7.23 and 3.2.x before 3.2.4, and Puppet Enterprise 2.8.x before 2.8.3 and 3.0.x before 3.0.1, allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service. NOTE: this vulnerability can only be exploited utilizing unspecified "local file system access" to the Puppet Master.  
Phase
Assigned (20130705)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
636567 64708 CVE-2013-4761 CONFIRM:http://puppetlabs.com/security/cve/cve-2013-4761/  View
636568 64708 CVE-2013-4761 DEBIAN:DSA-2761  View
636569 64708 CVE-2013-4761 URL:http://www.debian.org/security/2013/dsa-2761  View
636570 64708 CVE-2013-4761 REDHAT:RHSA-2013:1283  View
636571 64708 CVE-2013-4761 URL:http://rhn.redhat.com/errata/RHSA-2013-1283.html  View
636572 64708 CVE-2013-4761 REDHAT:RHSA-2013:1284  View
636573 64708 CVE-2013-4761 URL:http://rhn.redhat.com/errata/RHSA-2013-1284.html  View
636574 64708 CVE-2013-4761 SUSE:SUSE-SU-2014:0155  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22607 JVNDB-2013-004182 Eucalyptus のログ収集サービスにおけるログファイルを読まれる脆弱性 Eucalyptus のログ収集サービス (gather log service) には、ログファイルを読まれる脆弱性が存在します。 CVE-2013-4766 64708 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004182.html  View