NVD

Id
10438  
Name
CVE-2011-3870  
Description
Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to modify the permissions of arbitrary files via a symlink attack on the SSH authorized_keys file.  
Reject
 
CVSS Version
2  
CVSS Score
6.3  
Severity
Medium  
CVSS Base Score
6.3  
CVSS Impact Subscore
9.2  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-10-27  
Modified Date
2012-05-13  
Seq
2011-3870  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
59247 10438 CVE-2011-3870 http://groups.google.com/group/puppet-announce/browse_thread/thread/91e3b46d2328a1cb  View
59248 10438 CVE-2011-3870 FEDORA-2011-13636  View
59249 10438 CVE-2011-3870 FEDORA-2011-13633  View
59250 10438 CVE-2011-3870 FEDORA-2011-13623  View
59251 10438 CVE-2011-3870 DSA-2314  View
59252 10438 CVE-2011-3870 USN-1223-1  View
59253 10438 CVE-2011-3870 USN-1223-2  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32455 JVNDB-2011-002695 Puppet Labs の Puppet における任意のファイルのパーミッションを変更される脆弱性 Puppet Labs の Puppet には、任意のファイルのパーミッションを変更される脆弱性が存在します。 CVE-2011-3870 51777 CVE-2011-3870 10438 6.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002695.html 2011-09-30 2011-11-04 View