• info
• discussion
• exploit
• solution
• references

Reductive Labs Puppet '/tmp' Insecure File Permissions Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 9.10 sparc

• Ubuntu puppet-testsuite_0.24.8-2ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/puppet/puppet-testsu ite_0.24.8-2ubuntu4.1_all.deb


• Ubuntu puppet_0.24.8-2ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/puppet/puppet_0.24.8-2ub untu4.1_all.deb


• Ubuntu puppetmaster_0.24.8-2ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/puppet/puppetmaster_0.24 .8-2ubuntu4.1_all.deb

Ubuntu Ubuntu Linux 9.10 lpia

• Ubuntu puppet-testsuite_0.24.8-2ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/puppet/puppet-testsu ite_0.24.8-2ubuntu4.1_all.deb


• Ubuntu puppet_0.24.8-2ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/puppet/puppet_0.24.8-2ub untu4.1_all.deb


• Ubuntu puppetmaster_0.24.8-2ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/puppet/puppetmaster_0.24 .8-2ubuntu4.1_all.deb

Ubuntu Ubuntu Linux 9.10 i386

• Ubuntu puppet-testsuite_0.24.8-2ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/puppet/puppet-testsu ite_0.24.8-2ubuntu4.1_all.deb


• Ubuntu puppet_0.24.8-2ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/puppet/puppet_0.24.8-2ub untu4.1_all.deb


• Ubuntu puppetmaster_0.24.8-2ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/puppet/puppetmaster_0.24 .8-2ubuntu4.1_all.deb

Ubuntu Ubuntu Linux 9.10 powerpc

• Ubuntu puppet-testsuite_0.24.8-2ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/puppet/puppet-testsu ite_0.24.8-2ubuntu4.1_all.deb


• Ubuntu puppet_0.24.8-2ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/puppet/puppet_0.24.8-2ub untu4.1_all.deb


• Ubuntu puppetmaster_0.24.8-2ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/puppet/puppetmaster_0.24 .8-2ubuntu4.1_all.deb

Ubuntu Ubuntu Linux 9.10 amd64

• Ubuntu puppet-testsuite_0.24.8-2ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/p/puppet/puppet-testsu ite_0.24.8-2ubuntu4.1_all.deb


• Ubuntu puppet_0.24.8-2ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/puppet/puppet_0.24.8-2ub untu4.1_all.deb


• Ubuntu puppetmaster_0.24.8-2ubuntu4.1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/p/puppet/puppetmaster_0.24 .8-2ubuntu4.1_all.deb