PT-2011-1172 · Puppet · Puppet Enterprise (Pe) Users+1

Michael Stahnke · Published 2011-10-27 · Updated 2019-07-11 · CVE-2011-3872

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Puppet versions 2.6.x through 2.6.11 Puppet versions 2.7.x through 2.7.5 Puppet Enterprise (PE) Users versions 1.0 through 1.2.3

Description The issue allows remote attackers to spoof a Puppet master via a man-in-the-middle (MITM) attack against an agent that uses an alternate DNS name for the master. This can lead to a violation of confidentiality, integrity, and availability of protected information. The vulnerability can be exploited locally.

Recommendations For Puppet versions 2.6.x through 2.6.11, update to version 2.6.12 or later. For Puppet versions 2.7.x through 2.7.5, update to version 2.7.6 or later. For Puppet Enterprise (PE) Users versions 1.0 through 1.2.3, update to version 1.2.4 or later.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

CWE-264

Related Identifiers

BDU:2015-09427

CVE-2011-3872

DSA-2352-1

OPENSUSE-SU-2024:10581-1

Affected Products

Puppet

Puppet Enterprise (Pe) Users

References · 19

• 🔥 https://github.com/puppetlabs/puppetlabs-cve20113872 · Exploit
• 🔥 https://github.com/puppetlabs-toy-chest/puppetlabs-cve20113872 · Exploit
• http://secunia.com/advisories/46578 · Vendor Advisory
• http://groups.google.com/group/puppet-announce/browse_thread/thread/e7edc3a71348f3e1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2011-3872 · Security Note
• https://osv.dev/vulnerability/CVE-2011-3872 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09427 · Security Note
• http://ubuntu.com/usn/USN-1238-2 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-3872 · Vendor Advisory
• http://secunia.com/advisories/46550 · Vendor Advisory
• http://ubuntu.com/usn/USN-1238-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-3872 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70970 · Note
• http://puppetlabs.com/blog/important-security-announcement-altnames-vulnerability · Note
• http://security.gentoo.org/glsa/glsa-201203-03.xml · Note