CVE-2011-3848

Published: 28 September 2011

Directory traversal vulnerability in Puppet 2.6.x before 2.6.10 and 2.7.x before 2.7.4 allows remote attackers to write X.509 Certificate Signing Request (CSR) to arbitrary locations via (1) a double-encoded key parameter in the URI in 2.7.x, (2) the CN in the Subject of a CSR in 2.6 and 0.25.

Priority

Status

Package	Release	Status
puppet Launchpad, Ubuntu, Debian	hardy	Ignored (end of life, was pending)
	lucid	Released (0.25.4-2ubuntu6.2)
	maverick	Released (2.6.1-0ubuntu2.1)
	natty	Released (2.6.4-2ubuntu2.2)
	upstream	Pending (2.6.10, 2.7.4)

References

https://ubuntu.com/security/notices/USN-1217-1
https://www.cve.org/CVERecord?id=CVE-2011-3848
NVD
Launchpad
Debian

Bugs

https://launchpad.net/bugs/861182

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›