CVE-2011-3872

Published Oct 27, 2011

Last updated 5 years ago

Overview

Description: Puppet 2.6.x before 2.6.12 and 2.7.x before 2.7.6, and Puppet Enterprise (PE) Users 1.0, 1.1, and 1.2 before 1.2.4, when signing an agent certificate, adds the Puppet master's certdnsnames values to the X.509 Subject Alternative Name field of the certificate, which allows remote attackers to spoof a Puppet master via a man-in-the-middle (MITM) attack against an agent that uses an alternate DNS name for the master, aka "AltNames Vulnerability."
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 2.6
Impact score: 2.9
Exploitability score: 4.9
Vector string: AV:N/AC:H/Au:N/C:N/I:P/A:N

Weaknesses

nvd@nist.gov: CWE-20

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:puppet:puppet:2.6.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9BEF50EE-4E4B-4641-BA34-B5024F1EF683"
          },
          {
            "criteria": "cpe:2.3:a:puppet:puppet:2.6.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1CC72248-FD33-4CA0-A16E-0A174A864257"
          },
          {
            "criteria": "cpe:2.3:a:puppet:puppet:2.6.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7CEFB16E-261F-4B81-BCBE-536CAD2EC44B"
          },
          {
            "criteria": "cpe:2.3:a:puppet:puppet:2.6.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "652D28FC-7133-4C5F-95D9-3468548465B5"
          },
          {
            "criteria": "cpe:2.3:a:puppet:puppet:2.6.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AEEEE59D-BC0E-4107-B55D-9B182825E557"
          },
          {
            "criteria": "cpe:2.3:a:puppet:puppet:2.6.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B4ED400E-48F7-475B-A87C-A14EC63DD93D"
          },
          {
            "criteria": "cpe:2.3:a:puppet:puppet:2.6.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D827D4C2-7438-4EDD-9025-38D46CD5153C"
          },
          {
            "criteria": "cpe:2.3:a:puppet:puppet:2.6.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E73C341A-6C07-4820-B1D3-4616B634F380"
          },
          {
            "criteria": "cpe:2.3:a:puppet:puppet:2.6.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "61381D4C-972F-4979-84D2-793E4C60E23E"
          },
          {
            "criteria": "cpe:2.3:a:puppet:puppet:2.6.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7D8C2A71-0277-4426-8627-D6FD275EFC62"
          },
          {
            "criteria": "cpe:2.3:a:puppet:puppet:2.6.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3FB3C44C-2C6C-496C-9D2E-C43FFB493C42"
          },
          {
            "criteria": "cpe:2.3:a:puppet:puppet:2.6.11:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AD2656B0-9606-477B-BEB3-35746218BF9C"
          },
          {
            "criteria": "cpe:2.3:a:puppet:puppet:2.7.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BE56BA6B-BDC4-431E-81FD-D7ED5E8783E9"
          },
          {
            "criteria": "cpe:2.3:a:puppet:puppet:2.7.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FDDDFB28-1971-4CCD-93D2-ABC08FE67F4A"
          },
          {
            "criteria": "cpe:2.3:a:puppet:puppet:2.7.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "508105B4-619A-4A9D-8B2F-FE5992C1006A"
          },
          {
            "criteria": "cpe:2.3:a:puppet:puppet:2.7.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "26DB96A5-A57D-452F-A452-98B11F51CAE6"
          },
          {
            "criteria": "cpe:2.3:a:puppetlabs:puppet:2.7.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1E5192CB-094F-469E-A644-2255C4F44804"
          },
          {
            "criteria": "cpe:2.3:a:puppetlabs:puppet:2.7.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D17D2752-CB0D-4CC8-8604-FEBF8DEE16E0"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:puppet:puppet_enterprise:1.2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0A584D14-197E-47EB-B394-B8B211D4B502"
          },
          {
            "criteria": "cpe:2.3:a:puppet:puppet_enterprise:1.2.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BFF8F62F-8782-4FD2-BC14-3F9E46881F0C"
          },
          {
            "criteria": "cpe:2.3:a:puppet:puppet_enterprise:1.2.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "36A3FDB9-F599-4999-A6B9-C82C7DAF5A70"
          },
          {
            "criteria": "cpe:2.3:a:puppet:puppet_enterprise:1.2.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "41C07E3C-4F96-4B91-8B2D-09076749FF2B"
          },
          {
            "criteria": "cpe:2.3:a:puppetlabs:puppet_enterprise_users:1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3C1C09E3-88DB-4022-B4B4-8FEE5D9CB57B"
          },
          {
            "criteria": "cpe:2.3:a:puppetlabs:puppet_enterprise_users:1.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FD5ED72A-0C75-4680-8283-E0AE47780B3E"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References