Ubuntu 11.10 Moderate: Puppet Security Advisory USN-1419-1 Local Attack

Several security issues were fixed in puppet.

Software Description:

- puppet: Centralized configuration management

Details:

It was discovered that Puppet used a predictable filename when downloading Mac

OS X package files. A local attacker could exploit this to overwrite arbitrary

files. (CVE-2012-1906)

It was discovered that Puppet incorrectly handled filebucket retrieval

requests. A local attacker could exploit this to read arbitrary files.

(CVE-2012-1986)

It was discovered that Puppet incorrectly handled filebucket store requests. A

local attacker could exploit this to perform a denial of service via resource

exhaustion. (CVE-2012-1987)

It was discovered that Puppet incorrectly handled filebucket requests. A local

attacker could exploit this to execute arbitrary code via a crafted file path.

(CVE-2012-1988)

It was discovered that Puppet used a predictable filename for the Telnet

connection log file. A local attacker could exploit this to overwrite arbitrary

files. This is...