CVE-2014-3248 facter, hiera, mcollective-client, and puppet affected by untrusted search path vulnerability
MediumCVSS 6.2
EPSS 0.54%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2) Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so; or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so in puppet/confine.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems facter(RubyGems) | < 1.7.6 | 1.7.6 |
| rubygems facter(RubyGems) | >= 2.0.0, < 2.0.2 | 2.0.2 |
| rubygems hiera(RubyGems) | < 1.3.4 | 1.3.4 |
| rubygems puppet(RubyGems) | < 2.7.26 | 2.7.26 |
| rubygems puppet(RubyGems) | >= 3.0.0, < 3.6.2 | 3.6.2 |
| rubygems mcollective-client(RubyGems) | < 2.5.2 | 2.5.2 |
| rubygems facter(RubyGems) | = 1.0.1 | No fix listed |
| rubygems facter(RubyGems) | = 1.1.1 | No fix listed |
| rubygems facter(RubyGems) | = 1.3.3 | No fix listed |
| rubygems facter(RubyGems) | = 1.3.7 | No fix listed |
| rubygems facter(RubyGems) | = 1.3.8 | No fix listed |
| rubygems facter(RubyGems) | = 1.5 | No fix listed |
| rubygems facter(RubyGems) | = 1.5.2 | No fix listed |
| rubygems facter(RubyGems) | = 1.5.3 | No fix listed |
| rubygems facter(RubyGems) | = 1.5.4 | No fix listed |
| rubygems facter(RubyGems) | = 1.5.5 | No fix listed |
| rubygems facter(RubyGems) | = 1.5.6 | No fix listed |
| rubygems facter(RubyGems) | = 1.5.7 | No fix listed |
| rubygems facter(RubyGems) | = 1.5.8 | No fix listed |
| rubygems facter(RubyGems) | = 1.5.9 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.0 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.1 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.10 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.11 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.12 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems facter(RubyGems) | = 1.6.12.rc1 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.12.rc2 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.13 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.13.rc1 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.14 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.14.rc1 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.15 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.15.rc1 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.16 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.17 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.17.rc1 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.18 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.18.rc1 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.2 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.3 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.4 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.5 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.6 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.7 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.8 | No fix listed |
| rubygems facter(RubyGems) | = 1.6.9 | No fix listed |
| rubygems facter(RubyGems) | = 1.7.0 | No fix listed |
| rubygems facter(RubyGems) | = 1.7.0.rc1 | No fix listed |
| rubygems facter(RubyGems) | = 1.7.0.rc2 | No fix listed |
| rubygems facter(RubyGems) | = 1.7.1 | No fix listed |
| rubygems facter(RubyGems) | = 1.7.1.rc1 | No fix listed |
| rubygems facter(RubyGems) | = 1.7.2 | No fix listed |
| rubygems facter(RubyGems) | = 1.7.2.rc1 | No fix listed |
| rubygems facter(RubyGems) | = 1.7.3 | No fix listed |
| rubygems facter(RubyGems) | = 1.7.3.rc1 | No fix listed |
| rubygems facter(RubyGems) | = 1.7.4 | No fix listed |
| rubygems facter(RubyGems) | = 1.7.4.rc1 | No fix listed |
| rubygems facter(RubyGems) | = 1.7.5 | No fix listed |
| rubygems facter(RubyGems) | = 1.7.5.rc1 | No fix listed |
| rubygems facter(RubyGems) | = 1.7.5.rc2 | No fix listed |
| rubygems facter(RubyGems) | = 2.0.1 | No fix listed |
| rubygems facter(RubyGems) | = 2.0.1.rc1 | No fix listed |
| rubygems facter(RubyGems) | = 2.0.1.rc2 | No fix listed |
| rubygems facter(RubyGems) | = 2.0.1.rc3 | No fix listed |
| rubygems facter(RubyGems) | = 2.0.1.rc4 | No fix listed |
| rubygems hiera(RubyGems) | = 0.1.0 | No fix listed |
| rubygems hiera(RubyGems) | = 0.1.1 | No fix listed |
| rubygems hiera(RubyGems) | = 0.2.0 | No fix listed |
| rubygems hiera(RubyGems) | = 0.3.0 | No fix listed |
| rubygems hiera(RubyGems) | = 1.0.0 | No fix listed |
| rubygems hiera(RubyGems) | = 1.0.0rc4 | No fix listed |
| rubygems hiera(RubyGems) | = 1.1.0 | No fix listed |
| rubygems hiera(RubyGems) | = 1.1.0.rc1 | No fix listed |
| rubygems hiera(RubyGems) | = 1.1.1 | No fix listed |
| rubygems hiera(RubyGems) | = 1.1.1.rc1 | No fix listed |
| rubygems hiera(RubyGems) | = 1.1.2 | No fix listed |
| rubygems hiera(RubyGems) | = 1.1.2.rc1 | No fix listed |
| rubygems hiera(RubyGems) | = 1.1.2.rc2 | No fix listed |
| rubygems hiera(RubyGems) | = 1.2.0 | No fix listed |
| rubygems hiera(RubyGems) | = 1.2.0.rc1 | No fix listed |
| rubygems hiera(RubyGems) | = 1.2.0.rc2 | No fix listed |
| rubygems hiera(RubyGems) | = 1.2.0.rc3 | No fix listed |
| rubygems hiera(RubyGems) | = 1.2.1 | No fix listed |
| rubygems hiera(RubyGems) | = 1.2.1.rc1 | No fix listed |
| rubygems hiera(RubyGems) | = 1.3.0 | No fix listed |
| rubygems hiera(RubyGems) | = 1.3.0.rc2 | No fix listed |
| rubygems hiera(RubyGems) | = 1.3.1 | No fix listed |
| rubygems hiera(RubyGems) | = 1.3.1.rc1 | No fix listed |
| rubygems hiera(RubyGems) | = 1.3.2 | No fix listed |
| rubygems hiera(RubyGems) | = 1.3.2.rc1 | No fix listed |
| rubygems hiera(RubyGems) | = 1.3.2.rc2 | No fix listed |
| rubygems hiera(RubyGems) | = 1.3.3 | No fix listed |
| rubygems puppet(RubyGems) | = 0.13.0 | No fix listed |
| rubygems puppet(RubyGems) | = 0.13.1 | No fix listed |
| rubygems puppet(RubyGems) | = 0.13.2 | No fix listed |
| rubygems puppet(RubyGems) | = 0.13.6 | No fix listed |
| rubygems puppet(RubyGems) | = 0.16.0 | No fix listed |
| rubygems puppet(RubyGems) | = 0.18.4 | No fix listed |
| rubygems puppet(RubyGems) | = 0.22.4 | No fix listed |
| rubygems puppet(RubyGems) | = 0.23.0 | No fix listed |
| rubygems puppet(RubyGems) | = 0.23.1 | No fix listed |
| rubygems puppet(RubyGems) | = 0.23.2 | No fix listed |
| rubygems puppet(RubyGems) | = 0.24.0 | No fix listed |
| rubygems puppet(RubyGems) | = 0.24.1 | No fix listed |
| rubygems puppet(RubyGems) | = 0.24.2 | No fix listed |
| rubygems puppet(RubyGems) | = 0.24.3 | No fix listed |
| rubygems puppet(RubyGems) | = 0.24.4 | No fix listed |
| rubygems puppet(RubyGems) | = 0.24.5 | No fix listed |
| rubygems puppet(RubyGems) | = 0.24.6 | No fix listed |
| rubygems puppet(RubyGems) | = 0.24.7 | No fix listed |
| rubygems puppet(RubyGems) | = 0.24.8 | No fix listed |
| rubygems puppet(RubyGems) | = 0.24.9 | No fix listed |
| rubygems puppet(RubyGems) | = 0.25.0 | No fix listed |
| rubygems puppet(RubyGems) | = 0.25.1 | No fix listed |
| rubygems puppet(RubyGems) | = 0.25.2 | No fix listed |
| rubygems puppet(RubyGems) | = 0.25.3 | No fix listed |
| rubygems puppet(RubyGems) | = 0.25.4 | No fix listed |
| rubygems puppet(RubyGems) | = 0.25.5 | No fix listed |
| rubygems puppet(RubyGems) | = 0.9.2 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.0 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.1 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.10 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.11 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.12 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.13 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.14 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.15 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.16 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.17 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.18 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.2 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.3 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.4 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.5 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.6 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.7 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.8 | No fix listed |
| rubygems puppet(RubyGems) | = 2.6.9 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.1 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.11 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.12 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.13 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.14 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.16 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.17 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.18 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.19 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.20 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.20.rc1 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.21 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.22 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.23 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.24 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.25 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.3 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.4 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.5 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.6 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.8 | No fix listed |
| rubygems puppet(RubyGems) | = 2.7.9 | No fix listed |
| rubygems puppet(RubyGems) | = 3.0.0 | No fix listed |
| rubygems puppet(RubyGems) | = 3.0.1 | No fix listed |
| rubygems puppet(RubyGems) | = 3.0.1.rc1 | No fix listed |
| rubygems puppet(RubyGems) | = 3.0.2 | No fix listed |
| rubygems puppet(RubyGems) | = 3.0.2.rc1 | No fix listed |
| rubygems puppet(RubyGems) | = 3.0.2.rc2 | No fix listed |
| rubygems puppet(RubyGems) | = 3.0.2.rc3 | No fix listed |
| rubygems puppet(RubyGems) | = 3.1.0 | No fix listed |
| rubygems puppet(RubyGems) | = 3.1.0.rc1 | No fix listed |
| rubygems puppet(RubyGems) | = 3.1.0.rc2 | No fix listed |
| rubygems puppet(RubyGems) | = 3.1.1 | No fix listed |
| rubygems puppet(RubyGems) | = 3.2.0.rc1 | No fix listed |
| rubygems puppet(RubyGems) | = 3.2.0.rc2 | No fix listed |
| rubygems puppet(RubyGems) | = 3.2.1 | No fix listed |
| rubygems puppet(RubyGems) | = 3.2.1.rc1 | No fix listed |
| rubygems puppet(RubyGems) | = 3.2.2 | No fix listed |
| rubygems puppet(RubyGems) | = 3.2.3 | No fix listed |
| rubygems puppet(RubyGems) | = 3.2.3.rc1 | No fix listed |
| rubygems puppet(RubyGems) | = 3.2.4 | No fix listed |
| rubygems puppet(RubyGems) | = 3.3.0 | No fix listed |
| rubygems puppet(RubyGems) | = 3.3.0.rc2 | No fix listed |
| rubygems puppet(RubyGems) | = 3.3.0.rc3 | No fix listed |
| rubygems puppet(RubyGems) | = 3.3.1 | No fix listed |
| rubygems puppet(RubyGems) | = 3.3.1.rc1 | No fix listed |
| rubygems puppet(RubyGems) | = 3.3.1.rc2 | No fix listed |
| rubygems puppet(RubyGems) | = 3.3.1.rc3 | No fix listed |
| rubygems puppet(RubyGems) | = 3.3.2 | No fix listed |
| rubygems puppet(RubyGems) | = 3.4.0 | No fix listed |
| rubygems puppet(RubyGems) | = 3.4.0.rc1 | No fix listed |
| rubygems puppet(RubyGems) | = 3.4.0.rc2 | No fix listed |
| rubygems puppet(RubyGems) | = 3.4.1 | No fix listed |
| rubygems puppet(RubyGems) | = 3.4.2 | No fix listed |
| rubygems puppet(RubyGems) | = 3.4.3 | No fix listed |
| rubygems puppet(RubyGems) | = 3.5.0.rc1 | No fix listed |
| rubygems puppet(RubyGems) | = 3.5.0.rc2 | No fix listed |
| rubygems puppet(RubyGems) | = 3.5.0.rc3 | No fix listed |
| rubygems puppet(RubyGems) | = 3.5.1 | No fix listed |
| rubygems puppet(RubyGems) | = 3.5.1.rc1 | No fix listed |
| rubygems puppet(RubyGems) | = 3.6.0 | No fix listed |
| rubygems puppet(RubyGems) | = 3.6.0.rc1 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com exploit
- github.com exploit
- github.com exploit
- github.com exploit
- web.archive.org
- web.archive.org
- web.archive.org
- github.com
- Debian Security Tracker CVE-2014-3248 vendor-advisory
- puppetlabs.com vendor-advisory
- rowediness.com exploit technical-description
- 59197 technical-description third-party-advisory
- 59200 technical-description third-party-advisory
- 68035 third-party-advisory vdb-entry
- Ubuntu CVE tracker vendor-advisory
- USN-3308-1 vendor-advisory
- www.cve.org