Your submission was sent successfully! Close

Thank you for contacting us. A member of our team will be in touch shortly. Close

You have successfully unsubscribed! Close

CVE-2011-3869

Publication date 1 October 2011

Last updated 24 July 2024

Ubuntu priority

Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to overwrite arbitrary files via a symlink attack on the .k5login file.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
puppet	11.04 natty	Fixed 2.6.4-2ubuntu2.3
	10.10 maverick	Fixed 2.6.1-0ubuntu2.2
	10.04 LTS lucid	Fixed 0.25.4-2ubuntu6.3
	8.04 LTS hardy	Ignored end of life, was pending