CVE-2012-3866

Related Files

Debian Security Advisory 2511-1

Posted Jul 13, 2012

Authored by Debian | Site debian.org

Debian Linux Security Advisory 2511-1 - Several security vulnerabilities have been found in Puppet, a centralized configuration management.

tags | advisory, vulnerability

systems | linux, debian

advisories | CVE-2012-3864, CVE-2012-3865, CVE-2012-3866, CVE-2012-3867

MD5 | fcdba1fd04ebb02566f9813a18b2fc84

Download | Favorite | View

Ubuntu Security Notice USN-1506-1

Posted Jul 13, 2012

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1506-1 - It was discovered that Puppet incorrectly handled certain HTTP GET requests. An attacker could use this flaw with a valid client certificate to retrieve arbitrary files from the Puppet master. It was discovered that Puppet incorrectly handled Delete requests. If a Puppet master were reconfigured to allow the "Delete" method, an attacker on an authenticated host could use this flaw to delete arbitrary files from the Puppet server, leading to a denial of service. Various other issues were also addressed.

tags | advisory, web, denial of service, arbitrary

systems | linux, ubuntu

advisories | CVE-2012-3864, CVE-2012-3865, CVE-2012-3866, CVE-2012-3867, CVE-2012-3864, CVE-2012-3865, CVE-2012-3866, CVE-2012-3867

MD5 | b24b5fccd1a73bb1d4a15a08af33b3b7

Download | Favorite | View