RETIRED: Puppet CVE-2013-4761 Remote Code Execution Vulnerability

Bugtraq ID:	61858
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Aug 15 2013 12:00AM
Updated:	Aug 28 2013 04:50PM
Credit:	Puppet Labs
Vulnerable:	Puppet Labs Puppet Enterprise 2.5.1 Puppet Labs Puppet Enterprise 2.0.3 Puppet Labs Puppet Enterprise 2.0.2 Puppet Labs Puppet Enterprise 2.6 Puppet Labs Puppet Enterprise 1.2 Puppet Labs Puppet Enterprise 1.2 Puppet Labs Puppet Enterprise 1.1 Puppet Labs Puppet Enterprise 1.0 Puppet Labs Puppet Enterprise 2.0 Puppet Labs Puppet 2.7.13 Puppet Labs Puppet 2.7.11 Puppet Labs Puppet 2.7.10 Puppet Labs Puppet 2.7.5 Puppet Labs Puppet 2.7.4 Puppet Labs Puppet 2.6.15 Puppet Labs Puppet 2.6.14 Puppet Labs Puppet 2.6.13 Puppet Labs Puppet 2.6.11 Puppet Labs Puppet 2.6.10 Puppet Labs Puppet 2.6.4 Puppet Labs Puppet 2.6.3 Puppet Labs Puppet 2.6
Not Vulnerable:

RETIRED: Puppet CVE-2013-4761 Remote Code Execution Vulnerability

Puppet is prone to a remote code-execution vulnerability.

Successfully exploiting this issue will allow attackers to execute arbitrary code within the context of the application.

The issue is fixed in the following versions:

Puppet 2.7.23 and 3.2.4
Puppet Enterprise 2.8.3 and 3.0.1

Note: This BID is being retired as a duplicate of the issue discussed in BID 61806 (Puppet CVE-2013-4761 Arbitrary Code Execution Vulnerability).

RETIRED: Puppet CVE-2013-4761 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.