NVD

Id
37813  
Name
CVE-2013-1640  
Description
The (1) template and (2) inline_template functions in the master server in Puppet before 2.6.18, 2.7.x before 2.7.21, and 3.1.x before 3.1.1, and Puppet Enterprise before 1.2.7 and 2.7.x before 2.7.2 allows remote authenticated users to execute arbitrary code via a crafted catalog request.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-03-20  
Modified Date
2013-04-12  
Seq
2013-1640  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
192528 37813 CVE-2013-1640 SUSE-SU-2013:0618  View
192529 37813 CVE-2013-1640 openSUSE-SU-2013:0641  View
192530 37813 CVE-2013-1640 RHSA-2013:0710  View
192531 37813 CVE-2013-1640 USN-1759-1  View
192532 37813 CVE-2013-1640 DSA-2643  View
192533 37813 CVE-2013-1640 https://puppetlabs.com/security/cve/cve-2013-1640/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20381 JVNDB-2013-001956 Puppet における任意のコードを実行される脆弱性 Puppet および Puppet Enterprise のマスタサーバの、(1) template 関数、および (2) inline_template 関数には、任意のコードを実行される脆弱性が存在します。 CVE-2013-1640 61582 CVE-2013-1640 37813 9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001956.html 2013-03-12 2013-04-23 View