Skip to content
OpenAdvisories

Archive

29 May 2012

Vulnerabilities first published on this day (UTC), newest first.

← April 2012 2012 / May /29 June 2012 →
  1. 19
  2. 231
  3. 3111
  4. 48
  5. 5 
  6. 6 
  7. 7 
  8. 83
  9. 942
  10. 10 
  11. 1119
  12. 12 
  13. 13 
  14. 145
  15. 159
  16. 1630
  17. 1721
  18. 1812
  19. 19 
  20. 20 
  21. 2143
  22. 227
  23. 235
  24. 2433
  25. 258
  26. 26 
  27. 2714
  28. 28 
  29. 2911
  30. 301
  31. 313
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2012-1053

    Puppet Privilege Escallation

    The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows loca…

    puppet puppet Debian RubyGems
  • Medium —
    CVE-2012-1906

    Puppet uses predictable filenames, allowing arbitrary file overwrite

    Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 uses predictable file names when installing Mac OS X packages from a remote source, which allows local users to overwrite arbit…

    puppet puppet Debian RubyGems
  • Medium —
    CVE-2012-1988

    Puppet Arbitrary Command Execution

    Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys and file-creation permissions on the puppet master to execute arbitrary c…

    puppet puppet Debian RubyGems