CVE-2011-3872

N/A Unknown
Published: October 27, 2011 Modified: April 29, 2026
View on NVD

Description

Puppet 2.6.x before 2.6.12 and 2.7.x before 2.7.6, and Puppet Enterprise (PE) Users 1.0, 1.1, and 1.2 before 1.2.4, when signing an agent certificate, adds the Puppet master's certdnsnames values to the X.509 Subject Alternative Name field of the certificate, which allows remote attackers to spoof a Puppet master via a man-in-the-middle (MITM) attack against an agent that uses an alternate DNS name for the master, aka "AltNames Vulnerability."

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://groups.google.com/group/puppet-announce/browse_thread/thread/e7edc3a71348f3e1
Source: cve@mitre.org
Patch
http://puppetlabs.com/blog/important-security-announcement-altnames-vulnerability/
Source: cve@mitre.org
http://secunia.com/advisories/46550
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/46578
Source: cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/46934
Source: cve@mitre.org
http://secunia.com/advisories/46964
Source: cve@mitre.org
http://www.securityfocus.com/bid/50356
Source: cve@mitre.org
http://www.ubuntu.com/usn/USN-1238-1
Source: cve@mitre.org
http://www.ubuntu.com/usn/USN-1238-2
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/70970
Source: cve@mitre.org
https://puppet.com/security/cve/cve-2011-3872
Source: cve@mitre.org
http://groups.google.com/group/puppet-announce/browse_thread/thread/e7edc3a71348f3e1
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://puppetlabs.com/blog/important-security-announcement-altnames-vulnerability/
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/46550
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/46578
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/46934
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/46964
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/50356
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ubuntu.com/usn/USN-1238-1
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.ubuntu.com/usn/USN-1238-2
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/70970
Source: af854a3a-2127-422b-91ae-364da2661108
https://puppet.com/security/cve/cve-2011-3872
Source: af854a3a-2127-422b-91ae-364da2661108

22 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
2.5%
82th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-20

Affected Vendors

puppet puppetlabs

Related CVEs

CVE-2026-9677 N/A
CVE-2026-13245 6.1
CVE-2026-12404 5.3
CVE-2026-10820 N/A
CVE-2026-12415 9.8