CVE-2013-4969

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

Puppet before 3.3.3 and 3.4 before 3.4.1 and Puppet Enterprise (PE) before 2.8.4 and 3.1 before 3.1.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified files.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:N/I:P/A:N

Weakness enumeration

CWE-59

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://puppetlabs.com/security/cve/cve-2013-4969Vendor Advisory
http://secunia.com/advisories/56253Vendor Advisory
http://secunia.com/advisories/56254Vendor Advisory
http://www.debian.org/security/2013/dsa-2831Third Party Advisory
http://www.ubuntu.com/usn/USN-2077-1Third Party Advisory
http://puppetlabs.com/security/cve/cve-2013-4969Vendor Advisory
http://secunia.com/advisories/56253Vendor Advisory
http://secunia.com/advisories/56254Vendor Advisory
http://www.debian.org/security/2013/dsa-2831Third Party Advisory
http://www.ubuntu.com/usn/USN-2077-1Third Party Advisory

Timeline

Published: Jan 7, 2014
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-49715.0Puppet Enterprise before 3.2.0 does not properly restrict access to node endpoints in the console, which allows remote attackers to obtain s CVE-2013-49739.3Stack-based buffer overflow in RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to exe CVE-2013-49749.3RealNetworks RealPlayer before 16.0.3.51, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code or cause a CVE-2013-49758.8Hikvision DS-2CD7153-E IP Camera has Privilege Escalation CVE-2013-49769.8Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials CVE-2013-497710.0Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), and possibly other de CVE-2013-49789.3Stack-based buffer overflow in AloahaPDFViewer 5.0.0.7 and earlier in Aloaha PDF Suite FREE allows remote attackers to execute arbitrary cod CVE-2013-49799.3Buffer overflow in the gldll32.dll module in EPS Viewer 3.2 and earlier allows remote attackers to execute arbitrary code via a crafted EPS CVE-2013-49809.0Buffer overflow in the RTSP Packet Handler in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, a CVE-2013-49819.0Buffer overflow in cgi-bin/user/Config.cgi in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, a CVE-2013-49829.8AVTECH AVN801 DVR has a security bypass via the administration login captcha CVE-2013-498310.0The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to