medium4.7
CVE-2009-3564
puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might allow local users to access restricted fil…
Impact
puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might allow local users to access restricted files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Reductivelabs | Puppet | Version 0.24.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://projects.reductivelabs.com/issues/1806
- https://bugzilla.redhat.com/show_bug.cgi?id=475201
- https://puppet.com/security/cve/cve-2009-3564
- http://projects.reductivelabs.com/issues/1806
- https://bugzilla.redhat.com/show_bug.cgi?id=475201
- https://puppet.com/security/cve/cve-2009-3564