Test ID:	1.3.6.1.4.1.25623.1.0.71187
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 201203-03 (puppet)
Summary:	Gentoo Security Advisory GLSA 201203-03 (puppet)
Description:	The remote host is missing updates announced in advisory GLSA 201203-03. Multiple vulnerabilities have been found in Puppet, the worst of which might allow local attackers to gain escalated privileges. Solution: All Puppet users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=app-admin/puppet-2.7.11' http://www.securityspace.com/smysecure/catid.html?in=GLSA%20201203-03 http://bugs.gentoo.org/show_bug.cgi?id=303729 http://bugs.gentoo.org/show_bug.cgi?id=308031 http://bugs.gentoo.org/show_bug.cgi?id=384859 http://bugs.gentoo.org/show_bug.cgi?id=385149 http://bugs.gentoo.org/show_bug.cgi?id=388161 http://bugs.gentoo.org/show_bug.cgi?id=403963
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3564 http://projects.reductivelabs.com/issues/1806 Common Vulnerability Exposure (CVE) ID: CVE-2010-0156 http://groups.google.com/group/puppet-announce/browse_thread/thread/4401823f6cbf6087 http://groups.google.com/group/puppet-announce/browse_thread/thread/73cd1b2896d986c2 http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036083.html http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036166.html SuSE Security Announcement: SUSE-SR:2010:013 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html http://secunia.com/advisories/38766 Common Vulnerability Exposure (CVE) ID: CVE-2011-3848 Debian Security Information: DSA-2314 (Google Search) http://www.debian.org/security/2011/dsa-2314 SuSE Security Announcement: openSUSE-SU-2011:1190 (Google Search) http://lists.opensuse.org/opensuse-updates/2011-10/msg00033.html http://www.ubuntu.com/usn/USN-1217-1 http://secunia.com/advisories/46628 Common Vulnerability Exposure (CVE) ID: CVE-2011-3869 http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068093.html http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068061.html http://lists.fedoraproject.org/pipermail/package-announce/2011-October/068053.html http://www.ubuntu.com/usn/USN-1223-1 http://www.ubuntu.com/usn/USN-1223-2 http://secunia.com/advisories/46458 Common Vulnerability Exposure (CVE) ID: CVE-2011-3870 Common Vulnerability Exposure (CVE) ID: CVE-2011-3871 Common Vulnerability Exposure (CVE) ID: CVE-2011-3872 http://www.ubuntu.com/usn/USN-1238-1 http://www.ubuntu.com/usn/USN-1238-2 BugTraq ID: 50356 http://www.securityfocus.com/bid/50356 http://secunia.com/advisories/46550 http://secunia.com/advisories/46578 http://secunia.com/advisories/46934 http://secunia.com/advisories/46964 XForce ISS Database: puppet-x509-spoofing(70970) http://xforce.iss.net/xforce/xfdb/70970 Common Vulnerability Exposure (CVE) ID: CVE-2012-1053 http://projects.puppetlabs.com/issues/12457 http://projects.puppetlabs.com/issues/12458 http://projects.puppetlabs.com/issues/12459 Debian Security Information: DSA-2419 (Google Search) http://www.debian.org/security/2012/dsa-2419 SuSE Security Announcement: SUSE-SU-2012:0325 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00003.html SuSE Security Announcement: openSUSE-SU-2012:0835 (Google Search) https://hermes.opensuse.org/messages/15087408 http://ubuntu.com/usn/usn-1372-1 BugTraq ID: 52158 http://www.securityfocus.com/bid/52158 http://www.osvdb.org/79495 http://secunia.com/advisories/48157 http://secunia.com/advisories/48161 http://secunia.com/advisories/48166 http://secunia.com/advisories/48290 XForce ISS Database: puppet-forked-priv-escalation(73445) http://xforce.iss.net/xforce/xfdb/73445 Common Vulnerability Exposure (CVE) ID: CVE-2012-1054 http://projects.puppetlabs.com/issues/12460 http://www.osvdb.org/79496 XForce ISS Database: puppet-k5login-type-symlink(73446) http://xforce.iss.net/xforce/xfdb/73446
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: