CVE-2012-3867
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD
Description
lib/puppet/ssl/certificate_authority.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, does not properly restrict the characters in the Common Name field of a Certificate Signing Request (CSR), which makes it easier for user-assisted remote attackers to trick administrators into signing a crafted agent certificate via ANSI control sequences.
Affected (47)
Show all products
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 2.6.0 | |
| Up to 2.6.16 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 6.0 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.04 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 11.4 | |
| Version 11 sp1 | |
| Version 11 sp1 |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 2.5.1 |
Related CWEs
References (18)
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Third Party Advisory
Source: cve@mitre.org
Source: cve@mitre.org
ExploitIssue TrackingPatch
Source: cve@mitre.org
ExploitIssue TrackingPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue Tracking
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue TrackingPatch
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue TrackingPatch
Timeline
No history available yet.