Puppet allows remote attackers to execute arbitrary Ruby programs from the master via the resource_type service

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2013-4761 · ADVISORY
• puppetlabs/puppet · PACKAGE
• rubysec/ruby-advisory-db · WEB
• puppet.com/security/cve/cve-2013-4761-resourcetype-remote-code-execution-vulnerability · WEB
• lists.opensuse.org/opensuse-security-announce/2014-01/msg00009.html · WEB
• puppetlabs.com/security/cve/cve-2013-4761 · WEB
• rhn.redhat.com/errata/RHSA-2013-1283.html · WEB
• rhn.redhat.com/errata/RHSA-2013-1284.html · WEB
• debian.org/security/2013/dsa-2761 · WEB
• puppetlabs.com/security/cve/cve-2013-4761 · Vendor Advisory

Lỗ hổng khác của puppet

• CVE-2021-27025TRUNG BÌNH 6.5A flaw was discovered in Puppet Agent where the agent may silently ignore Augeas settings or may be vulnerable to a Denial of Service condit…
• CVE-2021-27023NGHIÊM TRỌNG 9.8A flaw was discovered in Puppet Agent and Puppet Server that may result in a leak of HTTP credentials when following HTTP redirects to a dif…
• CVE-2020-7942TRUNG BÌNH 6.5Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a comprom…
• CVE-2017-10689TRUNG BÌNH 5.5In previous versions of Puppet Agent it was possible to install a module with world writable permissions. Puppet Agent 5.3.4 and 1.10.10 inc…
• CVE-2016-2785NGHIÊM TRỌNG 9.8Puppet Server before 2.3.2 and Ruby puppetmaster in Puppet 4.x before 4.4.2 and in Puppet Agent before 1.4.2 might allow remote attackers to…