{"id":"CVE-2009-3564","details":"puppetmasterd in puppet 0.24.6 does not reset supplementary groups when it switches to a different user, which might allow local users to access restricted files.","modified":"2026-04-10T03:40:55.965734Z","published":"2009-10-06T17:30:00Z","references":[{"type":"ADVISORY","url":"http://projects.reductivelabs.com/issues/1806"},{"type":"ADVISORY","url":"https://bugzilla.redhat.com/show_bug.cgi?id=475201"},{"type":"ADVISORY","url":"https://puppet.com/security/cve/cve-2009-3564"},{"type":"EVIDENCE","url":"https://bugzilla.redhat.com/show_bug.cgi?id=475201"},{"type":"FIX","url":"http://projects.reductivelabs.com/issues/1806"},{"type":"REPORT","url":"https://bugzilla.redhat.com/show_bug.cgi?id=475201"}],"schema_version":"1.7.5"}