Skip to content
OpenAdvisories

Archive

27 October 2011

Vulnerabilities first published on this day (UTC), newest first.

← September 2011 2011 / October /27 November 2011 →
  1. 1 
  2. 210
  3. 319
  4. 418
  5. 528
  6. 613
  7. 726
  8. 839
  9. 942
  10. 1010
  11. 11 
  12. 1250
  13. 13 
  14. 1447
  15. 15 
  16. 162
  17. 17 
  18. 1859
  19. 1932
  20. 207
  21. 2112
  22. 226
  23. 234
  24. 249
  25. 2518
  26. 26 
  27. 2711
  28. 289
  29. 293
  30. 3010
  31. 31 
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2011-3869

    Puppet arbitrary file overwrite

    Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to overwrite arbitrary files via a symlink attack on the .k5login file.

    puppet puppet Debian RubyGems
  • Medium —
    CVE-2011-3871

    Puppet uses predictable filenames, allowing arbitrary file overwrite

    Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x, when running in --edit mode, uses a predictable file name, which allows local users to run arbitrary Puppet code or trick a user into editing arbitrary files.

    puppet puppet Debian RubyGems
  • Medium —
    CVE-2011-3870

    Puppet allows local users to modify the permissions of arbitrary files

    Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to modify the permissions of arbitrary files via a symlink attack on the SSH authorized_keys file.

    puppet puppet Debian RubyGems