{"id":"CVE-2010-0156","aliases":["DEBIAN-CVE-2010-0156","EUVD-2022-5419","GHSA-vrh7-99jh-3fmm"],"status":"published","title":"Puppet arbitrary files overwrite via a symlink attack","description":"Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/daemonout, (2) /tmp/puppetdoc.txt, (3) /tmp/puppetdoc.tex, or (4) /tmp/puppetdoc.aux temporary file.","severity":{"version":"2.0","score":3.3,"vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00325,"percentile":0.25741,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-59"],"published":"2010-03-03T19:00:00Z","modified":"2026-08-15T06:47:33Z","fixes":[{"ecosystem":"RubyGems","package":"puppet","fixed_in":["0.24.9","0.25.2"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:11","package":"puppet","fixed_in":["0.25.4-2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"RubyGems","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.24.0"},{"fixed":"0.24.9"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.25.0"},{"fixed":"0.25.2"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25.4-2"}]}]},{"source":"osv","ecosystem":"RubyGems","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.24.0"},{"fixed":"0.24.9"}]}],"versions":["0.24.0","0.24.1","0.24.2","0.24.3","0.24.4","0.24.5","0.24.6","0.24.7","0.24.8"]},{"source":"osv","ecosystem":"RubyGems","package":"puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.25.0"},{"fixed":"0.25.2"}]}],"versions":["0.25.0","0.25.1"]}],"products":[{"vendor":"puppet","product":"puppet"}],"references":[{"url":"http://secunia.com/advisories/38766","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=502881","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix","web"]},{"url":"http://groups.google.com/group/puppet-announce/browse_thread/thread/4401823f6cbf6087","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch","fix","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://groups.google.com/group/puppet-announce/browse_thread/thread/73cd1b2896d986c2","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036083.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036166.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://puppet.com/security/cve/cve-2010-0156","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0156","tags":["advisory"]},{"url":"https://github.com/puppetlabs/puppet/commit/0aae57f91dc69b22fb674f8de3a13c22edd07128","tags":["web"]},{"url":"https://github.com/puppetlabs/puppet/commit/6111ba80f2c6f6d1541af971f565119e6e03d77d","tags":["web"]},{"url":"https://web.archive.org/web/20100316113904/http://secunia.com/advisories/38766","tags":["web"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/puppet/CVE-2010-0156.yml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-vrh7-99jh-3fmm"},{"url":"https://security-tracker.debian.org/tracker/CVE-2010-0156","tags":["advisory"]},{"url":"https://github.com/puppetlabs/puppet","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2010-0156","description":"Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/daemonout, (2) /tmp/puppetdoc.txt, (3) /tmp/puppetdoc.tex, or (4) /tmp/puppetdoc.aux temporary file.","status":"published","published":"2010-03-03T19:00:00Z","modified":"2024-08-07T00:37:54.102Z","updated_at":"2026-11-02T14:33:30.359814Z"}],"euvd":[{"id":"EUVD-2022-5419","description":"Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/daemonout, (2) /tmp/puppetdoc.txt, (3) /tmp/puppetdoc.tex, or (4) /tmp/puppetdoc.aux temporary file.","status":"published","published":"2010-03-03T19:00:00Z","modified":"2024-08-07T00:37:54Z","updated_at":"2026-11-03T01:39:46.213752Z"}],"ghsa":[{"id":"GHSA-vrh7-99jh-3fmm","title":"Puppet arbitrary files overwrite via a symlink attack","description":"Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/daemonout, (2) /tmp/puppetdoc.txt, (3) /tmp/puppetdoc.tex, or (4) /tmp/puppetdoc.aux temporary file.","status":"published","published":"2022-05-02T06:10:33Z","modified":"2024-02-07T19:33:37Z","cwes":["CWE-59"],"updated_at":"2026-11-02T14:37:36.777238Z"}],"nvd":[{"id":"CVE-2010-0156","description":"Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/daemonout, (2) /tmp/puppetdoc.txt, (3) /tmp/puppetdoc.tex, or (4) /tmp/puppetdoc.aux temporary file.","status":"published","published":"2010-03-03T19:30:00.447Z","modified":"2026-06-16T23:15:35.07Z","cvss":[{"version":"2.0","score":3.3,"vector":"AV:L/AC:M/Au:N/C:N/I:P/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:01:40.249593Z"}],"osv":[{"id":"CVE-2010-0156","description":"Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/daemonout, (2) /tmp/puppetdoc.txt, (3) /tmp/puppetdoc.tex, or (4) /tmp/puppetdoc.aux temporary file.","status":"published","published":"2010-03-03T19:30:00Z","modified":"2026-04-10T03:41:06.727052Z","updated_at":"2026-11-02T15:43:57.714116Z"},{"id":"DEBIAN-CVE-2010-0156","description":"Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/daemonout, (2) /tmp/puppetdoc.txt, (3) /tmp/puppetdoc.tex, or (4) /tmp/puppetdoc.aux temporary file.","status":"published","published":"2010-03-03T19:30:00.447Z","modified":"2026-08-15T06:47:33.858990114Z","updated_at":"2026-11-02T15:45:24.013654Z"},{"id":"GHSA-vrh7-99jh-3fmm","title":"Puppet arbitrary files overwrite via a symlink attack","description":"Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/daemonout, (2) /tmp/puppetdoc.txt, (3) /tmp/puppetdoc.tex, or (4) /tmp/puppetdoc.aux temporary file.","status":"published","published":"2022-05-02T06:10:33Z","modified":"2024-12-03T06:08:48.266837Z","cwes":["CWE-59"],"updated_at":"2026-11-02T15:46:57.694388Z"}]}}