CVE

Id
57110  
CVE No.
CVE-2012-3867  
Status
Candidate  
Description
lib/puppet/ssl/certificate_authority.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, does not properly restrict the characters in the Common Name field of a Certificate Signing Request (CSR), which makes it easier for user-assisted remote attackers to trick administrators into signing a crafted agent certificate via ANSI control sequences.  
Phase
Assigned (20120706)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
590424 57110 CVE-2012-3867 CONFIRM:http://puppetlabs.com/security/cve/cve-2012-3867/  View
590425 57110 CVE-2012-3867 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=839158  View
590426 57110 CVE-2012-3867 CONFIRM:https://github.com/puppetlabs/puppet/commit/dfedaa5fa841ccf335245a748b347b7c7c236640  View
590427 57110 CVE-2012-3867 CONFIRM:https://github.com/puppetlabs/puppet/commit/f3419620b42080dad3b0be14470b20a972f13c50  View
590428 57110 CVE-2012-3867 DEBIAN:DSA-2511  View
590429 57110 CVE-2012-3867 URL:http://www.debian.org/security/2012/dsa-2511  View
590430 57110 CVE-2012-3867 SUSE:SUSE-SU-2012:0983  View
590431 57110 CVE-2012-3867 URL:http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00006.html  View
590432 57110 CVE-2012-3867 SUSE:openSUSE-SU-2012:0891  View
590433 57110 CVE-2012-3867 URL:http://lists.opensuse.org/opensuse-updates/2012-07/msg00036.html  View
590434 57110 CVE-2012-3867 UBUNTU:USN-1506-1  View
590435 57110 CVE-2012-3867 URL:http://www.ubuntu.com/usn/USN-1506-1  View
590436 57110 CVE-2012-3867 SECUNIA:50014  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30130 JVNDB-2012-005837 Open Constructor におけるクロスサイトスクリプティングの脆弱性 Open Constructor には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-3872 57110 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005837.html  View