[PUP-9216] Puppet agent version 4.10.12 is trying to access multiple VBE files which not even exists - Puppet Tickets

XML

Word

Printable

Type: Bug
Status: Closed
Priority: Normal
Resolution: Won't Fix
Affects Version/s: PUP 4.10.12
Fix Version/s: None
Component/s: None
Labels:
- Ruby
- puppetagent
- windows
Environment:

Hide

Debug: Facter: fact "os" has resolved to {
architecture => "x64",
family => "windows",
hardware => "x86_64",
name => "windows",
release =>
{ full => "10", major => "10" }
,
windows =>
{ system32 => "C:\WINDOWS\system32" }
}
Debug: Facter: fact "puppetversion" has resolved to "4.10.12"

Debug: Facter: fact "pe_version" resolved to null and will not be added
Debug: Facter: fact "rubyplatform" has resolved to "x64-mingw32"
Debug: Facter: fact "ruby" has resolved to
{ platform => "x64-mingw32", sitedir => "C:/Program Files/Puppet Labs/Puppet/sys/ruby/lib/ruby/site_ruby/2.1.0", version => "2.1.9" }
.

Show
Debug: Facter: fact "os" has resolved to { architecture => "x64", family => "windows", hardware => "x86_64", name => "windows", release => { full => "10", major => "10" } , windows => { system32 => "C:\WINDOWS\system32" } } Debug: Facter: fact "puppetversion" has resolved to "4.10.12" Debug: Facter: fact "pe_version" resolved to null and will not be added Debug: Facter: fact "rubyplatform" has resolved to "x64-mingw32" Debug: Facter: fact "ruby" has resolved to { platform => "x64-mingw32", sitedir => "C:/Program Files/Puppet Labs/Puppet/sys/ruby/lib/ruby/site_ruby/2.1.0", version => "2.1.9" } .

Ivanti Endpoint Security reports multiple File violation of ruby.exe with targets like:

c:\Program Files\TortoiseSVN\kill.VBE
C:\Program Files (x86)\Microsoft SQL Server\13\DTS\Binn\kill.VBE

And so on with files like systemctl.VBE, kill.VBE, urpmi.VBE on all paths defined on the system variable $PATH.