CVE-2016-3108

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

The pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or write to arbitrary files via a symlink attack.

Metrics

CVSS 3.0 7.1/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-59

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2016/05/20/1Mailing List, Third Party Advisory
https://access.redhat.com/errata/RHBA-2016:1501
https://bugzilla.redhat.com/attachment.cgi?id=1146475Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1325934Issue Tracking
https://github.com/pulp/pulp/pull/2528Issue Tracking, Patch, Third Party Advisory
https://pulp.plan.io/issues/1830Patch, Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/05/20/1Mailing List, Third Party Advisory
https://access.redhat.com/errata/RHBA-2016:1501
https://bugzilla.redhat.com/attachment.cgi?id=1146475Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=1325934Issue Tracking
https://github.com/pulp/pulp/pull/2528Issue Tracking, Patch, Third Party Advisory
https://pulp.plan.io/issues/1830Patch, Vendor Advisory

Timeline

Published: Jun 8, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-31099.8The backend/Login/load/ script in Shopware before 5.1.5 allows remote attackers to execute arbitrary code.CVE-2016-31107.5mod_cluster, as used in Red Hat JBoss Web Server 2.1, allows remote attackers to cause a denial of service (Apache http server crash) via an CVE-2016-31115.5pulp.spec in the installation process for Pulp 2.8.3 generates the RSA key pairs used to validate messages between the pulp server and pulp CVE-2016-31127.5client/consumer/cli.py in Pulp before 2.8.3 writes consumer private keys to etc/pki/pulp/consumer/consumer-cert.pem as world-readable, which CVE-2016-31136.1Cross-site scripting (XSS) vulnerability in ovirt-engine allows remote attackers to inject arbitrary web script or HTML.CVE-2016-31146.5Kallithea before 0.3.2 allows remote authenticated users to edit or delete open pull requests or delete comments by leveraging read access.CVE-2016-31156.4Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended she CVE-2016-31166.4CRLF injection vulnerability in Dropbear SSH before 2016.72 allows remote authenticated users to bypass intended shell-command restrictions CVE-2016-31186.5CRLF injection vulnerability in CA API Gateway (formerly Layer7 API Gateway) 7.1 before 7.1.04, 8.0 through 8.3 before 8.3.01, and 8.4 befor CVE-2016-31195.3The process_db_args function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c in the LDAP KDB module in kadmind in MIT Kerberos 5 (aka krb5 CVE-2016-31206.5The validate_as_request function in kdc_util.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.13.6 and 1.4.x bef CVE-2016-31245.3The sanitycheck module in SimpleSAMLphp before 1.14.1 allows remote attackers to learn the PHP version on the system via unspecified vectors