CVE-2012-3866

Related Files

Debian Security Advisory 2511-1

Posted Jul 13, 2012

Authored by Debian | Site debian.org

Debian Linux Security Advisory 2511-1 - Several security vulnerabilities have been found in Puppet, a centralized configuration management.

tags | advisory, vulnerability

systems | linux, debian

advisories | CVE-2012-3864, CVE-2012-3865, CVE-2012-3866, CVE-2012-3867

SHA-256 | e25085e2d398a35b784003943d6504c9cd06efb0e6a0fb325d9e06e7bbd9a937

Download | Favorite | View

Ubuntu Security Notice USN-1506-1

Posted Jul 13, 2012

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1506-1 - It was discovered that Puppet incorrectly handled certain HTTP GET requests. An attacker could use this flaw with a valid client certificate to retrieve arbitrary files from the Puppet master. It was discovered that Puppet incorrectly handled Delete requests. If a Puppet master were reconfigured to allow the "Delete" method, an attacker on an authenticated host could use this flaw to delete arbitrary files from the Puppet server, leading to a denial of service. Various other issues were also addressed.

tags | advisory, web, denial of service, arbitrary

systems | linux, ubuntu

advisories | CVE-2012-3864, CVE-2012-3865, CVE-2012-3866, CVE-2012-3867, CVE-2012-3864, CVE-2012-3865, CVE-2012-3866, CVE-2012-3867

SHA-256 | 2db822b8deddc568488cbb2592bc0d946bcd94f89af0b800dc6692643cf7a671

Download | Favorite | View