CVE-2010-0156

CVE-2010-0156 describes a local privilege escalation vulnerability affecting Puppet versions 0.24.x before 0.24.9 and 0.25.x before 0.25.2. A local attacker can exploit this flaw through a symlink attack on specific temporary files, leading to the overwrite of arbitrary files. The vulnerability has a low severity CVSS score of 3.3, indicating a local attack vector with medium attack complexity, resulting in partial integrity and availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.