CVE-2012-1053
Puppet Privilege Escallation
CVE-2012-1053 is a medium vulnerability (CVSS 6.9) in Puppet, published February 27, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 33rd percentile. Fixed in puppet 2.6.14.
- Severity
- 6.9 MediumCVSS 2.0, NVD
- Exploit chance
- 0.38%EPSS, 33rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.6.14puppet +5 more
Description
The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
puppetRubyGems | 2.6 up to 2.6.14 | 2.6.14 |
puppetRubyGems | 2.7 up to 2.7.11 | 2.7.11 |
puppetDebian:11 | before 2.7.11-1 | 2.7.11-1 |
puppetDebian:6.0 From an advisory covering 2 CVEs | before 2.6.2-5+squeeze4, plus listed versions 2.6.2-42.6.2-52.6.2-5+squeeze12.6.2-5+squeeze3 | 2.6.2-5+squeeze4 |
puppetRubyGems | 2.6 up to 2.6.14, plus listed versions 2.6.02.6.12.6.102.6.112.6.12 Show 9 moreShow less2.6.132.6.22.6.32.6.42.6.52.6.62.6.72.6.82.6.9 | 2.6.14 |
puppetRubyGems | 2.7 up to 2.7.11, plus listed versions 2.7.12.7.32.7.42.7.52.7.62.7.82.7.9 | 2.7.11 |
What each source reports
NVD Score used
The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.
- Record
CVE-2012-1053- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.
- Record
CVE-2012-1053- Updated
- 2026-11-02
EUVDEUVD-2022-2941No score
The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.
- Record
EUVD-2022-2941- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-77hg-g8cc-5r37No score
Puppet Privilege Escallation
The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.
- Record
GHSA-77hg-g8cc-5r37- Weakness
- CWE-269
- Updated
- 2026-11-02
OSVNo score
The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.
- Record
CVE-2012-1053- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-1053No score
The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.
- Record
DEBIAN-CVE-2012-1053- Updated
- 2026-11-02
OSVGHSA-77hg-g8cc-5r37No score
Puppet Privilege Escallation
The change_user method in the SUIDManager (lib/puppet/util/suidmanager.rb) in Puppet 2.6.x before 2.6.14 and 2.7.x before 2.7.11, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x before 2.0.3 does not properly manage group privileges, which allows local users to gain privileges via vectors related to (1) the change_user not dropping supplementary groups in certain conditions, (2) changes to the eguid without associated changes to the egid, or (3) the addition of the real gid to supplementary groups.
- Record
GHSA-77hg-g8cc-5r37- Weakness
- CWE-269
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/48157
projects.puppetlabs.com/projects/1/wiki/Release_Notes
puppetlabs.com/security/cve/cve-2012-1053
Show 20 moreShow less
ubuntu.com/usn/usn-1372-1
osvdb.org/79495
lists.opensuse.org/opensuse-security-announce/2012-03/msg00003.html
exchange.xforce.ibmcloud.com/vulnerabilities/73445
securityfocus.com/bid/52158
debian.org/security/2012/dsa-2419
hermes.opensuse.org/messages/15087408
nvd.nist.gov/vuln/detail/CVE-2012-1053
github.com/puppetlabs/puppet/commit/76d0749f0a9a496b70e7dc7e6d6d6ff692224e36
web.archive.org/web/20120504011717/http://puppetlabs.com/security/cve/cve-2012-1053
security-tracker.debian.org/tracker/CVE-2012-1053