CVE-2012-1053 — Improper Privilege Management in Puppet

CWE-264CWE-269 — Improper Privilege Management13 documents8 sources
Severity
6.9MEDIUMNVD
EPSS
0.0%
top 86.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
PuppetPuppet EnterprisePuppetlabs Puppet+1 more
Timeline
PublishedMay 29
Latest updateMay 14

Description

The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplement…

CVSS vector

AV:L/AC:M/C:C/I:C/A:CExploitability: 3.4 | Impact: 10.0

Affected Packages6 packages

▶NVDpuppet/puppet_enterprise8 versions+7
▶RubyGemspuppet/puppet2.6 — 2.6.14+1
▶Debianpuppet/puppet< 2.7.11-1
▶NVDpuppet/puppet23 versions+22

🔴Vulnerability Details

4
OSV
Puppet Privilege Escallation↗2022-05-14
▶
GHSA
Puppet Privilege Escallation↗2022-05-14
▶
CVEList
CVE-2012-1053: The change_user method in the SUIDManager (lib/puppet/util/suidmanager↗2012-05-29
▶
OSV
CVE-2012-1053: The change_user method in the SUIDManager (lib/puppet/util/suidmanager↗2012-05-29
▶

📋Vendor Advisories

3
Ubuntu
Puppet vulnerabilities↗2012-02-23
▶
Red Hat
Puppet 2.6.13 group ID handling issues↗2012-02-22
▶
Debian
CVE-2012-1053: puppet - The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Pu...↗2012
▶

💬Community

5
Bugzilla
CVE-2012-1053 CVE-2012-1054 rhc-server various flaws [openshift-express-1]↗2012-04-03
▶
Bugzilla
CVE-2012-1053 CVE-2012-1054 puppet various flaws [epel-all]↗2012-03-10
▶
Bugzilla
CVE-2011-3872 CVE-2012-1053 CVE-2012-1054 puppet various flaws [fedora-all]↗2012-03-10
▶
Bugzilla
CVE-2012-1053 Puppet 2.6.13 group ID handling issues↗2012-02-15
▶
Bugzilla
CVE-2012-1054 Puppet 2.6.13 Klogin File Handling Issue↗2012-02-15
▶
CVE-2012-1053 — Improper Privilege Management in Puppet | cvebase