CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-3867

lib/puppet/ssl/certificate_authority.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, does not properly restrict the characters in the Common Name field of a Certificate Signing Request (CSR), which makes it easier for user-assisted remote attackers to trick administrators into signing a crafted agent certificate via ANSI control sequences.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.014

EPSS Ranking 79.6%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2012-3867

Puppet » Puppet » Version: 2.6.0

cpe:2.3:a:puppet:puppet:2.6.0
Puppet » Puppet » Version: 2.6.1

cpe:2.3:a:puppet:puppet:2.6.1
Puppet » Puppet » Version: 2.6.10

cpe:2.3:a:puppet:puppet:2.6.10
Puppet » Puppet » Version: 2.6.11

cpe:2.3:a:puppet:puppet:2.6.11
Puppet » Puppet » Version: 2.6.12

cpe:2.3:a:puppet:puppet:2.6.12
Puppet » Puppet » Version: 2.6.13

cpe:2.3:a:puppet:puppet:2.6.13
Puppet » Puppet » Version: 2.6.14

cpe:2.3:a:puppet:puppet:2.6.14
Puppet » Puppet » Version: 2.6.15

cpe:2.3:a:puppet:puppet:2.6.15
Puppet » Puppet » Version: 2.6.2

cpe:2.3:a:puppet:puppet:2.6.2
Puppet » Puppet » Version: 2.6.3

cpe:2.3:a:puppet:puppet:2.6.3
Puppet » Puppet » Version: 2.6.4

cpe:2.3:a:puppet:puppet:2.6.4
Puppet » Puppet » Version: 2.6.5

cpe:2.3:a:puppet:puppet:2.6.5
Puppet » Puppet » Version: 2.6.6

cpe:2.3:a:puppet:puppet:2.6.6
Puppet » Puppet » Version: 2.6.7

cpe:2.3:a:puppet:puppet:2.6.7
Puppet » Puppet » Version: 2.6.8

cpe:2.3:a:puppet:puppet:2.6.8
Puppet » Puppet » Version: 2.6.9

cpe:2.3:a:puppet:puppet:2.6.9
Puppet » Puppet » Version: 2.7.10

cpe:2.3:a:puppet:puppet:2.7.10
Puppet » Puppet » Version: 2.7.11

cpe:2.3:a:puppet:puppet:2.7.11
Puppet » Puppet » Version: 2.7.12

cpe:2.3:a:puppet:puppet:2.7.12
Puppet » Puppet » Version: 2.7.13

cpe:2.3:a:puppet:puppet:2.7.13
Puppet » Puppet » Version: 2.7.14

cpe:2.3:a:puppet:puppet:2.7.14
Puppet » Puppet » Version: 2.7.16

cpe:2.3:a:puppet:puppet:2.7.16
Puppet » Puppet » Version: 2.7.17

cpe:2.3:a:puppet:puppet:2.7.17
Puppet » Puppet » Version: 2.7.2

cpe:2.3:a:puppet:puppet:2.7.2
Puppet » Puppet » Version: 2.7.3

cpe:2.3:a:puppet:puppet:2.7.3
Puppet » Puppet » Version: 2.7.4

cpe:2.3:a:puppet:puppet:2.7.4
Puppet » Puppet » Version: 2.7.5

cpe:2.3:a:puppet:puppet:2.7.5
Puppet » Puppet » Version: 2.7.6

cpe:2.3:a:puppet:puppet:2.7.6
Puppet » Puppet » Version: 2.7.7

cpe:2.3:a:puppet:puppet:2.7.7
Puppet » Puppet » Version: 2.7.8

cpe:2.3:a:puppet:puppet:2.7.8
Puppet » Puppet » Version: 2.7.9

cpe:2.3:a:puppet:puppet:2.7.9
Puppet » Puppet Enterprise » Version: N/A

cpe:2.3:a:puppet:puppet_enterprise:-
Puppet » Puppet Enterprise » Version: 1.0

cpe:2.3:a:puppet:puppet_enterprise:1.0
Puppet » Puppet Enterprise » Version: 1.1

cpe:2.3:a:puppet:puppet_enterprise:1.1
Puppet » Puppet Enterprise » Version: 1.2.0

cpe:2.3:a:puppet:puppet_enterprise:1.2.0
Puppet » Puppet Enterprise » Version: 1.2.1

cpe:2.3:a:puppet:puppet_enterprise:1.2.1
Puppet » Puppet Enterprise » Version: 1.2.2

cpe:2.3:a:puppet:puppet_enterprise:1.2.2
Puppet » Puppet Enterprise » Version: 1.2.3

cpe:2.3:a:puppet:puppet_enterprise:1.2.3
Puppet » Puppet Enterprise » Version: 1.2.4

cpe:2.3:a:puppet:puppet_enterprise:1.2.4
Puppet » Puppet Enterprise » Version: 1.2.5

cpe:2.3:a:puppet:puppet_enterprise:1.2.5
Puppet » Puppet Enterprise » Version: 1.2.6

cpe:2.3:a:puppet:puppet_enterprise:1.2.6
Puppet » Puppet Enterprise » Version: 1.2.7

cpe:2.3:a:puppet:puppet_enterprise:1.2.7
Puppet » Puppet Enterprise » Version: 2.0.0

cpe:2.3:a:puppet:puppet_enterprise:2.0.0
Puppet » Puppet Enterprise » Version: 2.0.1

cpe:2.3:a:puppet:puppet_enterprise:2.0.1
Puppet » Puppet Enterprise » Version: 2.0.2

cpe:2.3:a:puppet:puppet_enterprise:2.0.2
Puppet » Puppet Enterprise » Version: 2.0.3

cpe:2.3:a:puppet:puppet_enterprise:2.0.3
Puppet » Puppet Enterprise » Version: 2.5.0

cpe:2.3:a:puppet:puppet_enterprise:2.5.0
Puppet » Puppet Enterprise » Version: 2.5.1

cpe:2.3:a:puppet:puppet_enterprise:2.5.1
Puppetlabs » Puppet » Version: 0.25.0

cpe:2.3:a:puppetlabs:puppet:0.25.0
Puppetlabs » Puppet » Version: 0.25.1

cpe:2.3:a:puppetlabs:puppet:0.25.1
Puppetlabs » Puppet » Version: 0.25.2

cpe:2.3:a:puppetlabs:puppet:0.25.2
Puppetlabs » Puppet » Version: 0.25.3

cpe:2.3:a:puppetlabs:puppet:0.25.3
Puppetlabs » Puppet » Version: 0.25.4

cpe:2.3:a:puppetlabs:puppet:0.25.4
Puppetlabs » Puppet » Version: 0.25.5

cpe:2.3:a:puppetlabs:puppet:0.25.5
Puppetlabs » Puppet » Version: 0.25.6

cpe:2.3:a:puppetlabs:puppet:0.25.6
Puppetlabs » Puppet » Version: 1.0

cpe:2.3:a:puppetlabs:puppet:1.0
Puppetlabs » Puppet » Version: 1.1

cpe:2.3:a:puppetlabs:puppet:1.1
Puppetlabs » Puppet » Version: 1.2

cpe:2.3:a:puppetlabs:puppet:1.2
Puppetlabs » Puppet » Version: 2.0.0

cpe:2.3:a:puppetlabs:puppet:2.0.0
Puppetlabs » Puppet » Version: 2.0.1

cpe:2.3:a:puppetlabs:puppet:2.0.1
Puppetlabs » Puppet » Version: 2.0.2

cpe:2.3:a:puppetlabs:puppet:2.0.2
Puppetlabs » Puppet » Version: 2.0.3

cpe:2.3:a:puppetlabs:puppet:2.0.3
Puppetlabs » Puppet » Version: 2.5.1

cpe:2.3:a:puppetlabs:puppet:2.5.1
Puppetlabs » Puppet » Version: 2.5.2

cpe:2.3:a:puppetlabs:puppet:2.5.2
Puppetlabs » Puppet » Version: 2.6.0

cpe:2.3:a:puppetlabs:puppet:2.6.0
Puppetlabs » Puppet » Version: 2.6.1

cpe:2.3:a:puppetlabs:puppet:2.6.1
Puppetlabs » Puppet » Version: 2.6.10

cpe:2.3:a:puppetlabs:puppet:2.6.10
Puppetlabs » Puppet » Version: 2.6.11

cpe:2.3:a:puppetlabs:puppet:2.6.11
Puppetlabs » Puppet » Version: 2.6.12

cpe:2.3:a:puppetlabs:puppet:2.6.12
Puppetlabs » Puppet » Version: 2.6.13

cpe:2.3:a:puppetlabs:puppet:2.6.13
Puppetlabs » Puppet » Version: 2.6.14

cpe:2.3:a:puppetlabs:puppet:2.6.14
Puppetlabs » Puppet » Version: 2.6.15

cpe:2.3:a:puppetlabs:puppet:2.6.15
Puppetlabs » Puppet » Version: 2.6.16

cpe:2.3:a:puppetlabs:puppet:2.6.16
Puppetlabs » Puppet » Version: 2.6.2

cpe:2.3:a:puppetlabs:puppet:2.6.2
Puppetlabs » Puppet » Version: 2.6.3

cpe:2.3:a:puppetlabs:puppet:2.6.3
Puppetlabs » Puppet » Version: 2.6.4

cpe:2.3:a:puppetlabs:puppet:2.6.4
Puppetlabs » Puppet » Version: 2.6.5

cpe:2.3:a:puppetlabs:puppet:2.6.5
Puppetlabs » Puppet » Version: 2.6.6

cpe:2.3:a:puppetlabs:puppet:2.6.6
Puppetlabs » Puppet » Version: 2.6.7

cpe:2.3:a:puppetlabs:puppet:2.6.7
Puppetlabs » Puppet » Version: 2.6.8

cpe:2.3:a:puppetlabs:puppet:2.6.8
Puppetlabs » Puppet » Version: 2.6.9

cpe:2.3:a:puppetlabs:puppet:2.6.9
Puppetlabs » Puppet » Version: 2.7.0

cpe:2.3:a:puppetlabs:puppet:2.7.0
Puppetlabs » Puppet » Version: 2.7.1

cpe:2.3:a:puppetlabs:puppet:2.7.1
Canonical » Ubuntu Linux » Version: 10.04

cpe:2.3:o:canonical:ubuntu_linux:10.04
Canonical » Ubuntu Linux » Version: 11.04

cpe:2.3:o:canonical:ubuntu_linux:11.04
Canonical » Ubuntu Linux » Version: 11.10

cpe:2.3:o:canonical:ubuntu_linux:11.10
Canonical » Ubuntu Linux » Version: 12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04
Debian » Debian Linux » Version: 6.0

cpe:2.3:o:debian:debian_linux:6.0
Opensuse » Opensuse » Version: 11.4

cpe:2.3:o:opensuse:opensuse:11.4
Opensuse » Opensuse » Version: 12.1

cpe:2.3:o:opensuse:opensuse:12.1
Suse » Linux Enterprise Desktop » Version: 11

cpe:2.3:o:suse:linux_enterprise_desktop:11
Suse » Linux Enterprise Server » Version: 11

cpe:2.3:o:suse:linux_enterprise_server:11

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2012-3867

Products

Pricing

Contact Us