CVE-2009-3564

puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might allow local users to access restricted files.

🔗 References (6)

• cve@mitrehttp://projects.reductivelabs.com/issues/1806
• cve@mitrehttps://bugzilla.redhat.com/show_bug.cgi?id=475201
• cve@mitrehttps://puppet.com/security/cve/cve-2009-3564
• af854a3a-2127-422b-91ae-364da2661108http://projects.reductivelabs.com/issues/1806
• af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=475201
• af854a3a-2127-422b-91ae-364da2661108https://puppet.com/security/cve/cve-2009-3564