CVE-2012-1988: canonical ubuntu_linux OS Command Injection

CVSS: 6.0v2.0MediumModified

AliasesDEBIAN-CVE-2012-1988GHSA-6xxq-j39w-g3f6

Published 29-05-2012Last modified 06-08-2024

Vulnerability summary

CVE-2012-1988 is a medium (CVSS 6.0) OS Command Injection vulnerability in canonical ubuntu_linux. EPSS estimates a 2.60% chance of exploitation in the next 30 days, higher than 85.1% of scored vulnerabilities.

Overall risk

25/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.0/10

010

Medium · v2.0 (NVD)

EPSS score

2.60%

0%100%

Low · -0.03 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1

DSA-2451-1

Timeline

29-05-2012
PublishedVulnerability first disclosed.
06-08-2024
Last modifiedVulnerability information updated.

Description

Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise (PE) Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys and file-creation permissions on the puppet master to execute arbitrary commands by creating a file whose full pathname contains shell metacharacters, then performing a filebucket request.

CVSS metrics

1 score · 1 source · 1 version

v2.06.0

EPSS trend

Probability

2.60%

Chance of exploitation in the next 30 days

Percentile

85%

Versus all other CVEs

30-day change

-0.03 pp

From 2.63% on 19-09-2026

19-09-202619-10-2026

EPSS score

2.60%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Affected systems

Debian2 products

puppet< 2.7.13-1
debian_linuxEOL6.0 | 7.0

Puppet2 products

puppet≥ 2.6.0, < 2.6.15 | ≥ 2.7.0, < 2.7.13
puppet_enterprise≥ 1.2.0, < 2.5.1 | 1.0 | 1.1

Canonical1 product

ubuntu_linuxEOL10.04 | 11.04 | 11.10

Fedoraproject1 product

fedoraEOL15 | 16 | 17

RubyGems1 product

puppet≥ 2.6.0, < 2.6.15 | ≥ 2.7.0, < 2.7.13

5 vendors · 7 products

References

33 links

www.osvdb.org/81309VDB EntryX Refsource OSVDBBroken Link
ubuntu.com/usn/usn-1419-1Vendor AdvisoryX Refsource UBUNTUThird Party AdvisoryWEB
lists.fedoraproject.org/pipermail/package-announce/2012-April/079227.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party AdvisoryWEB
puppetlabs.com/security/cve/cve-2012-1988/X Refsource CONFIRMBroken LinkVendor Advisory
projects.puppetlabs.com/issues/13518X Refsource MISCBroken LinkVendor AdvisoryWEB
hermes.opensuse.org/messages/14523305Vendor AdvisoryX Refsource SUSEBroken LinkWEB
secunia.com/advisories/48743Third Party AdvisoryX Refsource SECUNIABroken LinkVendor Advisory
projects.puppetlabs.com/projects/1/wiki/Release_NotesX Refsource CONFIRMBroken LinkWEB
exchange.xforce.ibmcloud.com/vulnerabilities/74796VDB EntryX Refsource XFThird Party AdvisoryWEB
lists.fedoraproject.org/pipermail/package-announce/2012-April/079289.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party AdvisoryWEB

Show all 33 references

lists.fedoraproject.org/pipermail/package-announce/2012-May/080003.htmlVendor AdvisoryX Refsource FEDORAMailing ListThird Party AdvisoryWEB
secunia.com/advisories/49136Third Party AdvisoryX Refsource SECUNIABroken LinkVendor Advisory
www.securityfocus.com/bid/52975VDB EntryX Refsource BIDBroken LinkThird Party Advisory
secunia.com/advisories/48748Third Party AdvisoryX Refsource SECUNIABroken LinkVendor Advisory
www.debian.org/security/2012/dsa-2451Vendor AdvisoryX Refsource DEBIANThird Party AdvisoryWEB
hermes.opensuse.org/messages/15087408Vendor AdvisoryX Refsource SUSEBroken LinkWEB
secunia.com/advisories/48789Third Party AdvisoryX Refsource SECUNIABroken LinkVendor Advisory
security-tracker.debian.org/tracker/CVE-2012-1988Advisory
nvd.nist.gov/vuln/detail/CVE-2012-1988Advisory
github.com/puppetlabs/puppet/commit/0d6d29933e613fe177e9235415919a5428db67bcWEB
github.com/puppetlabs/puppet/commit/568ded50ec6cc498ad32ff7f086d9f73b5d24c14WEB
web.archive.org/web/20121031092646/http://www.securityfocus.com/bid/52975WEB
web.archive.org/web/20121025194938/http://secunia.com/advisories/48743WEB
web.archive.org/web/20121025194830/http://secunia.com/advisories/49136WEB
web.archive.org/web/20121025113446/http://secunia.com/advisories/48748WEB
web.archive.org/web/20121025112409/http://secunia.com/advisories/48789WEB
web.archive.org/web/20121013181707/http://puppetlabs.com/security/cve/cve-2012-1988WEB
web.archive.org/web/20120816020421/http://projects.puppetlabs.com/projects/1/wiki/Release_NotesWEB
web.archive.org/web/20120513213112/http://projects.puppetlabs.com/issues/13518WEB
web.archive.org/web/20120415105345/http://www.securityfocus.com/bid/52975WEB
github.com/rubysec/ruby-advisory-db/blob/master/gems/puppet/CVE-2012-1988.ymlWEB
github.com/puppetlabs/puppetPACKAGE
puppetlabs.com/security/cve/cve-2012-1988WEB

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities