CVE ID:	CVE-2012-1053
Description:	The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.
Test IDs:	1.3.6.1.4.1.25623.1.0.71147   1.3.6.1.4.1.25623.1.1.4.2012.0325.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1053 BugTraq ID: 52158 http://www.securityfocus.com/bid/52158 Debian Security Information: DSA-2419 (Google Search) http://www.debian.org/security/2012/dsa-2419 http://projects.puppetlabs.com/issues/12457 http://projects.puppetlabs.com/issues/12458 http://projects.puppetlabs.com/issues/12459 http://www.osvdb.org/79495 http://secunia.com/advisories/48157 http://secunia.com/advisories/48161 http://secunia.com/advisories/48166 http://secunia.com/advisories/48290 SuSE Security Announcement: SUSE-SU-2012:0325 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00003.html SuSE Security Announcement: openSUSE-SU-2012:0835 (Google Search) https://hermes.opensuse.org/messages/15087408 http://ubuntu.com/usn/usn-1372-1 XForce ISS Database: puppet-forked-priv-escalation(73445) https://exchange.xforce.ibmcloud.com/vulnerabilities/73445