VDB
GCVE-110-MAGEIA-2013-259
GCVE-110-MAGEIA-2013-259
Advisory Published
It was discovered that Puppet incorrectly handled the resource_type
service. A local attacker on the master could use this issue to execute
arbitrary Ruby files (CVE-2013-4761).
It was discovered that Puppet incorrectly handled permissions on the
modules it installed. Modules could be installed with the permissions
that existed when they were built, possibly exposing them to a local
attacker (CVE-2013-4956).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | puppet | 0 (affected), 2.7.23-1.mga2 (unaffected) | — |
| Mageia | puppet | 2.7.23-1.mga3 (unaffected), 0 (affected) | — |
| Mageia | puppet3 | 3.2.4-1.mga3 (unaffected), 0 (affected) | — |
References
Browse GCVE Records
73,196 records in the GCVE database · Updated July 17, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.