Vulnerability Description
The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Puppet | Puppet | 2.6.0 |
| Puppetlabs | Puppet | 2.7.0 |
| Puppet | Puppet Enterprise | 1.2.0 |
| Puppetlabs | Puppet Enterprise Users | 1.0 |
Related Weaknesses (CWE)
References
- http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00003.html
- http://projects.puppetlabs.com/issues/12457
- http://projects.puppetlabs.com/issues/12458
- http://projects.puppetlabs.com/issues/12459
- http://projects.puppetlabs.com/projects/1/wiki/Release_Notes#2.6.14
- http://puppetlabs.com/security/cve/cve-2012-1053/Vendor Advisory
- http://secunia.com/advisories/48157
- http://secunia.com/advisories/48161Vendor Advisory
- http://secunia.com/advisories/48166Vendor Advisory
- http://secunia.com/advisories/48290Vendor Advisory
- http://ubuntu.com/usn/usn-1372-1
- http://www.debian.org/security/2012/dsa-2419
- http://www.osvdb.org/79495
- http://www.securityfocus.com/bid/52158
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73445
FAQ
What is CVE-2012-1053?
CVE-2012-1053 is a vulnerability with a CVSS score of 6.9 (MEDIUM). The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 d...
How severe is CVE-2012-1053?
CVE-2012-1053 has been rated MEDIUM with a CVSS base score of 6.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-1053?
Check the references section above for vendor advisories and patch information. Affected products include: Puppet Puppet, Puppetlabs Puppet, Puppet Puppet Enterprise, Puppetlabs Puppet Enterprise Users.