Issue #13552 has been updated by Matthaus Litteken. Private changed from Yes to No
---------------------------------------- Bug #13552: Puppet master will save files to any place on disk https://projects.puppetlabs.com/issues/13552#change-60330 Author: Andrew Parker Status: Closed Priority: High Assignee: Andrew Parker Category: security Target version: 2.7.13 Affected Puppet version: Keywords: Branch: By constructing a marshaled form of a Puppet::FileBucket::File object a user can cause it it to be written to any place on the disk of the puppet master. This could be used for a denial of service attach against the puppet master if an attacker fills a filesystem that can cause systems to stop working. In order to do this the attacker needs no access to the puppet master system, but does need access to agent SSL keys. -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://projects.puppetlabs.com/my/account -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/puppet-bugs?hl=en.
