CVE-2012-3867

lib/puppet/ssl/certificate_authority.rb in Puppet before 2.6.17 and 2.7.x before 2.7.18, and Puppet Enterprise before 2.5.2, does not properly restrict the characters in the Common Name field of a Certificate Signing Request (CSR), which makes it easier for user-assisted remote attackers to trick administrators into signing a crafted agent certificate via ANSI control sequences.

• puppet puppet 2.6.0 • puppet puppet 2.6.1 • puppet puppet 2.6.2 • puppet puppet 2.6.3 • puppet puppet 2.6.4 • puppet puppet 2.6.5 • puppet puppet 2.6.6 • puppet puppet 2.6.7 • puppet puppet 2.6.8 • puppet puppet 2.6.9 • puppet puppet 2.6.10 • puppet puppet 2.6.11 • puppet puppet 2.6.12 • puppet puppet 2.6.13 • puppet puppet 2.6.14 • puppet puppet 2.6.15 • puppet puppet 2.7.2 • puppet puppet 2.7.3 • puppet puppet 2.7.4 • puppet puppet 2.7.5 • puppet puppet 2.7.6 • puppet puppet 2.7.7 • puppet puppet 2.7.8 • puppet puppet 2.7.9 • puppet puppet 2.7.10 • puppet puppet 2.7.11 • puppet puppet 2.7.12 • puppet puppet 2.7.13 • puppet puppet 2.7.14 • puppet puppet 2.7.16 • puppet puppet 2.7.17 • puppetlabs puppet (<= 2.6.16) • puppetlabs puppet 2.7.0 • puppetlabs puppet 2.7.1 • debian debian linux 6.0 • canonical ubuntu linux 10.04 • canonical ubuntu linux 11.04 • canonical ubuntu linux 11.10 • canonical ubuntu linux 12.04 • opensuse opensuse 11.4 • opensuse opensuse 12.1 • suse linux enterprise desktop 11 • suse linux enterprise server 11 • puppet puppet enterprise (<= 2.5.1)