Vulnerability Details : CVE-2009-3564

puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might allow local users to access restricted files.

Published 2009-10-06 17:30:00

Updated 2017-12-09 02:29:00

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2009-3564

Probability of exploitation activity in the next 30 days: 0.04%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 6 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2009-3564

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
4.7	MEDIUM	AV:L/AC:M/Au:N/C:C/I:N/A:N	3.4	6.9	[email protected]
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: None Availability Impact: None

CWE ids for CVE-2009-3564

CWE-264

Assigned by: [email protected] (Primary)

Vendor statements for CVE-2009-3564

Red Hat 2009-10-08

Red Hat is aware of this issue and is tracking it via the following bug: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=CVE-2009-3564 The Red Hat Security Response Team has rated this issue as having low security impact, a future update for Red Hat Enterprise MRG may address this flaw.

References for CVE-2009-3564

https://puppet.com/security/cve/cve-2009-3564
https://bugzilla.redhat.com/show_bug.cgi?id=475201

Exploit
http://projects.reductivelabs.com/issues/1806

Patch;Vendor Advisory

Products affected by CVE-2009-3564

Reductivelabs » Puppet » Version: 0.24.6
cpe:2.3:a:reductivelabs:puppet:0.24.6:*:*:*:*:*:*:*
Matching versions
When used together with: Centos » Centos
When used together with: Fedoraproject » Fedora