cnvd - cnvd-2017-38111

CNVD-2017-38111

Vulnerability from cnvd - Published: 2017-12-26

Title

Puppet Agent PXP agent代码执行漏洞

Description

Puppet Agent是美国Puppet实验室的一套用于查看配置文件的客户端工具。Puppet Execution Protocol（PXP）agent是其中的一个Puppet执行协议工具。 Puppet Agent 1.3.0版本至1.5.x版本中的PXP agent存在代码执行漏洞。攻击者可利用该漏洞加载代码。

Severity

低

Patch Name

Puppet Agent PXP agent代码执行漏洞的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://puppet.com/security/cve/cve-2016-5713

Reference

https://puppet.com/security/cve/cve-2016-5713

Impacted products

Name
Puppet Agent PXP agent >=1.3.0，<=1.5.*

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-5713"
    }
  },
  "description": "Puppet Agent\u662f\u7f8e\u56fdPuppet\u5b9e\u9a8c\u5ba4\u7684\u4e00\u5957\u7528\u4e8e\u67e5\u770b\u914d\u7f6e\u6587\u4ef6\u7684\u5ba2\u6237\u7aef\u5de5\u5177\u3002Puppet Execution Protocol\uff08PXP\uff09agent\u662f\u5176\u4e2d\u7684\u4e00\u4e2aPuppet\u6267\u884c\u534f\u8bae\u5de5\u5177\u3002\r\n\r\nPuppet Agent 1.3.0\u7248\u672c\u81f31.5.x\u7248\u672c\u4e2d\u7684PXP agent\u5b58\u5728\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u52a0\u8f7d\u4ee3\u7801\u3002",
  "discovererName": "Puppet",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://puppet.com/security/cve/cve-2016-5713",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2017-38111",
  "openTime": "2017-12-26",
  "patchDescription": "Puppet Agent\u662f\u7f8e\u56fdPuppet\u5b9e\u9a8c\u5ba4\u7684\u4e00\u5957\u7528\u4e8e\u67e5\u770b\u914d\u7f6e\u6587\u4ef6\u7684\u5ba2\u6237\u7aef\u5de5\u5177\u3002Puppet Execution Protocol\uff08PXP\uff09agent\u662f\u5176\u4e2d\u7684\u4e00\u4e2aPuppet\u6267\u884c\u534f\u8bae\u5de5\u5177\u3002\r\n\r\nPuppet Agent 1.3.0\u7248\u672c\u81f31.5.x\u7248\u672c\u4e2d\u7684PXP agent\u5b58\u5728\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u52a0\u8f7d\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Puppet Agent PXP agent\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Puppet Agent PXP agent \u003e=1.3.0\uff0c\u003c=1.5.*"
  },
  "referenceLink": "https://puppet.com/security/cve/cve-2016-5713",
  "serverity": "\u4f4e",
  "submitTime": "2017-12-08",
  "title": "Puppet Agent PXP agent\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e"
}

CVE-2016-5713 (GCVE-0-2016-5713)

Vulnerability from cvelistv5 – Published: 2017-12-06 15:00 – Updated: 2024-09-17 00:06

Summary

Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables through to Puppet runs. This could allow unauthorized code to be loaded. This bug was first introduced in Puppet Agent 1.3.0.

Severity ?

No CVSS data available.

CWE

Privilege Escalation

Assigner

puppet

References

URL

Tags

https://puppet.com/security/cve/cve-2016-5713

x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	Puppet	Puppet Agent	Affected: Introduced in 1.3.0, fixed in 1.6.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:07:59.971Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://puppet.com/security/cve/cve-2016-5713"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Puppet Agent",
          "vendor": "Puppet",
          "versions": [
            {
              "status": "affected",
              "version": "Introduced in 1.3.0, fixed in 1.6.0"
            }
          ]
        }
      ],
      "datePublic": "2016-08-11T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables through to Puppet runs. This could allow unauthorized code to be loaded. This bug was first introduced in Puppet Agent 1.3.0."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Privilege Escalation",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-12-06T14:57:02",
        "orgId": "ca2a266c-be2f-4d4b-92d0-47b76b1a9c4e",
        "shortName": "puppet"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://puppet.com/security/cve/cve-2016-5713"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@puppet.com",
          "DATE_PUBLIC": "2016-08-11T00:00:00",
          "ID": "CVE-2016-5713",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Puppet Agent",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Introduced in 1.3.0, fixed in 1.6.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Puppet"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables through to Puppet runs. This could allow unauthorized code to be loaded. This bug was first introduced in Puppet Agent 1.3.0."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Privilege Escalation"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://puppet.com/security/cve/cve-2016-5713",
              "refsource": "CONFIRM",
              "url": "https://puppet.com/security/cve/cve-2016-5713"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ca2a266c-be2f-4d4b-92d0-47b76b1a9c4e",
    "assignerShortName": "puppet",
    "cveId": "CVE-2016-5713",
    "datePublished": "2017-12-06T15:00:00Z",
    "dateReserved": "2016-06-16T00:00:00",
    "dateUpdated": "2024-09-17T00:06:12.325Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2017-38111

CVE-2016-5713 (GCVE-0-2016-5713)

Tags

Sightings

Nomenclature