Puppet contains a flaw that may allow a malicious local user to overwrite arbitrary files on the system. The issue is due to NET::Telnet creating temporary output logs insecurely. It is possible for a local attacker to use a symlink attack to cause the program to unexpectedly write to, or overwrite an attacker specified file.
Classification
Location:
Local Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Patch / RCS,
Upgrade
Exploit:
Exploit Unknown
Disclosure:
Vendor Verified
Solution
Upgrade to version 2.7.13, or 2.5.1 for Enterprise, or higher, as they have been reported to fix this vulnerability. In addition, the vendor has released a patch for some older versions.
