Bug 810071 (CVE-2012-1988)

Summary:	CVE-2012-1988 puppet: Filebucket arbitrary code execution
Product:	[Other] Security Response	Reporter:	Kurt Seifried <kseifried>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED ERRATA	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	mjc, security-response-team, tmz
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	puppet 2.6.15, puppet 2.7.13	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-12-11 09:26:12 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	811820, 811821, 812955, 812956, 834391
Bug Blocks:	810072, 836071

Description Kurt Seifried 2012-04-05 04:06:28 UTC

From Matthaus Litteken <matthaus>:

CVE-2012-1988 (High) [#13518] - Filebucket arbitrary code execution
This requires access to the cert on the agent and an unprivileged 
account on the master. By creating a path on the master in a 
world-writable location that matches a command string, one can 
then make a file bucket request to execute that command.

Comment 3 Vincent Danen 2012-04-16 16:27:08 UTC

This is public now.

External Reference:

http://puppetlabs.com/security/cve/cve-2012-1988/

Comment 4 Vincent Danen 2012-04-16 16:33:17 UTC

Created puppet tracking bugs for this issue

Affects: fedora-all [bug 812955]
Affects: epel-all [bug 812956]

Comment 5 Murray McAllister 2012-04-19 05:14:50 UTC

Acknowledgements:

Red Hat would like to thank Puppet Labs for reporting this issue.

Comment 6 Fedora Update System 2012-04-27 05:51:15 UTC

puppet-2.6.16-1.fc16 has been pushed to the Fedora 16 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 7 Fedora Update System 2012-04-27 06:05:22 UTC

puppet-2.6.16-1.fc15 has been pushed to the Fedora 15 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 8 Fedora Update System 2012-05-02 20:32:51 UTC

puppet-2.6.16-1.el6 has been pushed to the Fedora EPEL 6 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 9 Fedora Update System 2012-05-02 20:33:36 UTC

puppet-2.6.16-1.el5 has been pushed to the Fedora EPEL 5 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 10 Fedora Update System 2012-05-06 04:52:42 UTC

puppet-2.7.13-1.fc17 has been pushed to the Fedora 17 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 12 errata-xmlrpc 2012-12-04 19:31:01 UTC

This issue has been addressed in following products:

  CloudForms for RHEL 6

Via RHSA-2012:1542 https://rhn.redhat.com/errata/RHSA-2012-1542.html