CVE-2012-1053
Puppet Privilege Escallation
CVE-2012-1053 is a medium vulnerability (CVSS 6.9) in Puppet, published February 27, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. Fixed in puppet 2.6.14.
The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.
Exploit likelihood
What each source reports
NVD Score used
The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.
- Record
CVE-2012-1053- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.
- Record
CVE-2012-1053- Updated
- 2026-11-02
EUVDEUVD-2022-2941 No score
The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.
- Record
EUVD-2022-2941- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-77hg-g8cc-5r37 No score
Puppet Privilege Escallation
The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.
- Record
GHSA-77hg-g8cc-5r37- Weakness
- CWE-269
- Updated
- 2026-11-02
OSV No score
The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.
- Record
CVE-2012-1053- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-1053 No score
The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.
- Record
DEBIAN-CVE-2012-1053- Updated
- 2026-11-02
OSVGHSA-77hg-g8cc-5r37 No score
Puppet Privilege Escallation
The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.
- Record
GHSA-77hg-g8cc-5r37- Weakness
- CWE-269
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
puppetRubyGems |
2.6 up to 2.6.14 | 2.6.14 |
puppetRubyGems |
2.7 up to 2.7.11 | 2.7.11 |
puppetDebian:11 |
before 2.7.11-1 | 2.7.11-1 |
puppetDebian:6.0 |
before 2.6.2-5+squeeze4, plus listed versions 2.6.2-42.6.2-52.6.2-5+squeeze12.6.2-5+squeeze3 |
2.6.2-5+squeeze4 |
puppetRubyGems |
2.6 up to 2.6.14, plus listed versions 2.6.02.6.12.6.102.6.112.6.12 Show 9 moreShow less2.6.132.6.22.6.32.6.42.6.52.6.62.6.72.6.82.6.9 |
2.6.14 |
puppetRubyGems |
2.7 up to 2.7.11, plus listed versions 2.7.12.7.32.7.42.7.52.7.62.7.82.7.9 |
2.7.11 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
secunia.com/advisories/48157
projects.puppetlabs.com/projects/1/wiki/Release_Notes
puppetlabs.com/security/cve/cve-2012-1053
Show 20 moreShow less
ubuntu.com/usn/usn-1372-1
osvdb.org/79495
lists.opensuse.org/opensuse-security-announce/2012-03/msg00003.html
exchange.xforce.ibmcloud.com/vulnerabilities/73445
securityfocus.com/bid/52158
debian.org/security/2012/dsa-2419
hermes.opensuse.org/messages/15087408
nvd.nist.gov/vuln/detail/CVE-2012-1053
github.com/puppetlabs/puppet/commit/76d0749f0a9a496b70e7dc7e6d6d6ff692224e36
web.archive.org/web/20120504011717/http://puppetlabs.com/security/cve/cve-2012-1053
security-tracker.debian.org/tracker/CVE-2012-1053