CVE-2010-0156
First published: Wed May 27 2009(Updated: )
Description of problem: I noticed that puppet may create several predictable files in /tmp, e.g. /tmp/daemonout /tmp/puppetdoc.txt /tmp/puppetdoc.tex There are also a lot more in the tests, but they may not be run in Fedora's F10 spec, and even more in the puppet source, e.g. for the dmg installation provider. Version-Release number of selected component (if applicable): puppet-0.24.8-1.fc10 How reproducible: always Steps to Reproduce: 1. grep -nR /tmp/ /usr/lib/ruby/site_ruby/1.8/puppet Actual results: Contains ruby code like: /usr/lib/ruby/site_ruby/1.8/puppet/daemon.rb:33: File.open("/tmp/daemonout", "w") { |f| Expected results: Should only report findings that are not executed, e.g. in comments or help information Additional info: Current git seems to contain even more issues, e.g. lib/puppet/network/server.rb:25: File.open("/tmp/daemonout", "w") { |f|
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Puppet Puppet | =0.24.3 | |
| Puppet Puppet | =0.25.0-beta1 | |
| Puppet Puppet | =0.25.0-rc1 | |
| Puppet Puppet | =0.24.5 | |
| Puppet Puppet | =0.25.1 | |
| Puppet Puppet | =0.25.1-rc2 | |
| Puppet Puppet | =0.24.6-rc1 | |
| Puppet Puppet | =0.24.7-rc2 | |
| Puppet Puppet | =0.25.2-rc3 | |
| Puppet Puppet | =0.24.7 | |
| Puppet Puppet | =0.25.2-rc2 | |
| Puppet Puppet | =0.24.6 | |
| Puppet Puppet | =0.25.0 | |
| Puppet Puppet | =0.25.1-rc1 | |
| Puppet Puppet | =0.25.2-rc1 | |
| Puppet Puppet | =0.24.4 | |
| Puppet Puppet | =0.25.0-beta2 | |
| Puppet Puppet | =0.24.8 | |
| Puppet Puppet | =0.24.8-rc1 | |
| Puppet Puppet | =0.24.6-rc2 | |
| redhat/0.25.4 | <1.el5 | 1.el5 |
| rubygems/puppet | >=0.25.0<0.25.2 | 0.25.2 |
| rubygems/puppet | >=0.24.0<0.24.9 | 0.24.9 |
| =0.24.3 | ||
| =0.24.4 | ||
| =0.24.5 | ||
| =0.24.6 | ||
| =0.24.6-rc1 | ||
| =0.24.6-rc2 | ||
| =0.24.7 | ||
| =0.24.7-rc2 | ||
| =0.24.8 | ||
| =0.24.8-rc1 | ||
| =0.25.0 | ||
| =0.25.0-beta1 | ||
| =0.25.0-beta2 | ||
| =0.25.0-rc1 | ||
| =0.25.1 | ||
| =0.25.1-rc1 | ||
| =0.25.1-rc2 | ||
| =0.25.2-rc1 | ||
| =0.25.2-rc2 | ||
| =0.25.2-rc3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://groups.google.com/group/puppet-announce/browse_thread/thread/4401823f6cbf6087
- http://secunia.com/advisories/38766
- http://groups.google.com/group/puppet-announce/browse_thread/thread/73cd1b2896d986c2
- http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036166.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036083.html
- https://bugzilla.redhat.com/show_bug.cgi?id=502881
- http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
- https://puppet.com/security/cve/cve-2010-0156
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=502881#c1
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=502881#c2
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=502881#c3
- http://capec.mitre.org/data/definitions/27.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=502881#c5
- http://www.ruby-doc.org/stdlib/libdoc/tempfile/rdoc/index.html
- http://fedoraproject.org/wiki/BugZappers/HouseKeeping
- http://github.com/MarkusQ/puppet/commit/0e9db34ba0afe0ea0bee3afd005a011e3099d055
- https://access.redhat.com/security/cve/CVE-2010-0156
- http://admin.fedoraproject.org/updates/F12/FEDORA-2010-0251
- http://admin.fedoraproject.org/updates/F11/FEDORA-2010-0254
- http://admin.fedoraproject.org/updates/EL-5/FEDORA-EPEL-2010-0031
- http://admin.fedoraproject.org/updates/EL-5/FEDORA-EPEL-2010-0054
- http://admin.fedoraproject.org/updates/EL-4/FEDORA-EPEL-2010-0046
- http://admin.fedoraproject.org/updates/F12/FEDORA-2010-0492
- http://admin.fedoraproject.org/updates/F11/FEDORA-2010-0523
- http://admin.fedoraproject.org/updates/puppet-0.25.3-2.fc11
- http://admin.fedoraproject.org/updates/puppet-0.25.3-2.fc12
- http://admin.fedoraproject.org/updates/puppet-0.25.3-2.el5
- http://admin.fedoraproject.org/updates/puppet-0.25.3-2.el4
- http://admin.fedoraproject.org/updates/EL-4/FEDORA-EPEL-2010-0095
- http://admin.fedoraproject.org/updates/EL-5/FEDORA-EPEL-2010-0097
- http://admin.fedoraproject.org/updates/F12/FEDORA-2010-0834
- http://admin.fedoraproject.org/updates/F11/FEDORA-2010-0865
- http://admin.fedoraproject.org/updates/puppet-0.25.4-1.el5
- http://admin.fedoraproject.org/updates/puppet-0.25.4-1.fc11
- http://admin.fedoraproject.org/updates/puppet-0.25.4-1.el4
- http://admin.fedoraproject.org/updates/puppet-0.25.4-1.fc12
- http://admin.fedoraproject.org/updates/F12/FEDORA-2010-1336
- http://admin.fedoraproject.org/updates/F11/FEDORA-2010-1347
- http://admin.fedoraproject.org/updates/EL-5/FEDORA-EPEL-2010-0154
- http://admin.fedoraproject.org/updates/EL-4/FEDORA-EPEL-2010-0163
- https://nvd.nist.gov/vuln/detail/CVE-2010-0156
- https://github.com/puppetlabs/puppet/commit/0aae57f91dc69b22fb674f8de3a13c22edd07128
- https://github.com/puppetlabs/puppet/commit/6111ba80f2c6f6d1541af971f565119e6e03d77d
- https://web.archive.org/web/20100316113904/http://secunia.com/advisories/38766
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puppet/CVE-2010-0156.yml
- https://github.com/advisories/GHSA-vrh7-99jh-3fmm (Advisory)
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/first-publish-date
- agent/severity
- agent/remedy
- agent/weakness
- agent/description
- agent/author
- agent/softwarecombine
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2010-0156
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-vrh7-99jh-3fmm
- agent/references
- collector/github-advisory
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/event
- agent/trending
- vendor/puppet
- canonical/puppet puppet
- version/puppet puppet/0.24.3
- version/puppet puppet/0.25.0-beta1
- version/puppet puppet/0.25.0-rc1
- version/puppet puppet/0.24.5
- version/puppet puppet/0.25.1
- version/puppet puppet/0.25.1-rc2
- version/puppet puppet/0.24.6-rc1
- version/puppet puppet/0.24.7-rc2
- version/puppet puppet/0.25.2-rc3
- version/puppet puppet/0.24.7
- version/puppet puppet/0.25.2-rc2
- version/puppet puppet/0.24.6
- version/puppet puppet/0.25.0
- version/puppet puppet/0.25.1-rc1
- version/puppet puppet/0.25.2-rc1
- version/puppet puppet/0.24.4
- version/puppet puppet/0.25.0-beta2
- version/puppet puppet/0.24.8
- version/puppet puppet/0.24.8-rc1
- version/puppet puppet/0.24.6-rc2
- package-manager/redhat
- package-manager/rubygems