Oval Definition:oval:org.opensuse.security:def:20113871
Revision Date:2022-05-20Version:1
Title:CVE-2011-3871
Description:

Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x, when running in --edit mode, uses a predictable file name, which allows local users to run arbitrary Puppet code or trick a user into editing arbitrary files.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2011-3871
Mitre CVE-2011-3871
SUSE CVE-2011-3871
openSUSE-SU-2011:1288-1
openSUSE-SU-2011:1288-1
Platform(s):openSUSE 11.3
openSUSE 11.4
SUSE Linux Enterprise Desktop 11 SP1
SUSE Linux Enterprise Server 11 SP1
SUSE Linux Enterprise Server 11 SP1 for Teradata
SUSE Linux Enterprise Server 11 SP1 for VMware
SUSE Linux Enterprise Server 11 SP1-TERADATA
SUSE Linux Enterprise Server 11 SP2
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server for SAP Applications 11 SP1-TERADATA
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND Package Information
  • puppet-2.6.18-0.4 is installed
  • OR puppet-server-2.6.18-0.4 is installed
    • Definition Synopsis
  • Release Information
  • sled11-sp1 is installed
  • AND puppet less than 2.6.12-0.6.1
  • OR
  • sles11-sp1 is installed
  • puppet-server less than 2.6.12-0.6.1
  • OR puppet less than 2.6.12-0.6.1
  • OR Package Information
  • suse113 is installed
  • puppet-server less than 0.25.4-4.7.1
  • OR puppet less than 0.25.4-4.7.1
  • OR
  • suse114 is installed
  • puppet-server less than 2.6.4-4.11.1
  • OR puppet less than 2.6.4-4.11.1
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • AND
  • puppet-2.6.12-0.10.1 is installed
  • OR puppet-server-2.6.12-0.10.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND
  • puppet-2.6.18-0.4.2 is installed
  • OR puppet-server-2.6.18-0.4.2 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP4 is installed
  • AND
  • puppet-2.7.26-0.5.1 is installed
  • OR puppet-server-2.7.26-0.5.1 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND
  • puppet-2.6.18-0.4.2 is installed
  • OR puppet-server-2.6.18-0.4.2 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP4 is installed
  • AND
  • puppet-2.7.26-0.5.1 is installed
  • OR puppet-server-2.7.26-0.5.1 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • AND
  • puppet-2.6.12-0.10 is installed
  • OR puppet-server-2.6.12-0.10 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND
  • puppet-2.6.18-0.4 is installed
  • OR puppet-server-2.6.18-0.4 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP4 is installed
  • AND
  • puppet-2.7.26-0.5 is installed
  • OR puppet-server-2.7.26-0.5 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP1 is installed
  • AND
  • puppet-2.6.12-0.6 is installed
  • OR puppet-server-2.6.12-0.6 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • AND
  • puppet-2.6.12-0.10 is installed
  • OR puppet-server-2.6.12-0.10 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND
  • puppet-2.6.18-0.4 is installed
  • OR puppet-server-2.6.18-0.4 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP4 is installed
  • AND
  • puppet-2.7.26-0.5 is installed
  • OR puppet-server-2.7.26-0.5 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP1 is installed
  • OR SUSE Linux Enterprise Server 11 SP1-TERADATA is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 11 SP1-TERADATA is installed
  • AND
  • puppet-2.6.12-0.6 is installed
  • OR puppet-server-2.6.12-0.6 is installed
  • OR pwdutils-3.2.8-0.2 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND
  • puppet-2.6.18-0.4.2 is installed
  • OR puppet-server-2.6.18-0.4.2 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP4 is installed
  • AND
  • puppet-2.7.26-0.5.1 is installed
  • OR puppet-server-2.7.26-0.5.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • AND
  • puppet-2.6.12-0.10.1 is installed
  • OR puppet-server-2.6.12-0.10.1 is installed
  • OR Package Information
  • SUSE Linux Enterprise Server 11 SP1 is installed
  • OR SUSE Linux Enterprise Server 11 SP1-TERADATA is installed
  • AND
  • puppet-2.6.12-0.6.1 is installed
  • OR puppet-server-2.6.12-0.6.1 is installed
  • OR pwdutils-3.2.8-0.2.35 is installed
    • BACK