Solution
Please Install the Updated Packages.
Insight
It was discovered that Puppet incorrectly handled the resource_type service. A local attacker on the master could use this issue to execute arbitrary Ruby files. (CVE-2013-4761)
It was discovered that Puppet incorrectly handled permissions on the modules it installed. Modules could be installed with the permissions that existed when they were built, possibly exposing them to a local attacker.
(CVE-2013-4956)
Affected
puppet on Ubuntu 13.04 ,
Ubuntu 12.10 ,
Ubuntu 12.04 LTS
Severity
Classification
-
CVE CVE-2013-4761, CVE-2013-4956 -
CVSS Base Score: 5.1
AV:N/AC:H/Au:N/C:P/I:P/A:P
Related Vulnerabilities