Lucene search
MitreCVELIST:CVE-2013-1654HistoryMar 20, 2013 - 4:00 p.m.
CVE-2013-1654
2013-03-2016:00:00
mitre
www.cve.org
5
Puppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, and Puppet Enterprise 2.7.x before 2.7.2, does not properly negotiate the SSL protocol between client and master, which allows remote attackers to conduct SSLv2 downgrade attacks against SSLv3 sessions via unspecified vectors.
References
lists.opensuse.org/opensuse-security-announce/2013-04/msg00004.html
lists.opensuse.org/opensuse-updates/2013-04/msg00056.html
rhn.redhat.com/errata/RHSA-2013-0710.html
secunia.com/advisories/52596
ubuntu.com/usn/usn-1759-1
www.debian.org/security/2013/dsa-2643
www.securityfocus.com/bid/64758
puppetlabs.com/security/cve/cve-2013-1654/
Related
prion
prion
Code injection
2013-03-20 16:55:00
cve
cve
CVE-2013-1654
2013-03-20 16:55:01
debiancve
debiancve
CVE-2013-1654
2013-03-20 16:55:01
nvd
nvd
CVE-2013-1654
2013-03-20 16:55:01
ubuntucve
ubuntucve
CVE-2013-1654
2013-03-12 00:00:00
nessus
nessus
Puppet Multiple Vulnerabilities (2013/03/12)
2013-04-26 00:00:00
FreeBSD : puppet26 -- multiple vulnerabilities (04042f95-14b8-4382-a8b9-b30e365776cf)
2013-03-14 00:00:00
Fedora 18 : puppet-3.1.1-1.fc18 (2013-3935)
2013-08-02 00:00:00
freebsd
freebsd
puppet26 -- multiple vulnerabilities
2013-03-13 00:00:00
puppet27 and puppet -- multiple vulnerabilities
2013-03-13 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-1759-1)
2013-03-15 00:00:00
Ubuntu Update for puppet USN-1759-1
2013-03-15 00:00:00
Debian Security Advisory DSA 2643-1 (puppet - several vulnerabilities)
2013-03-12 00:00:00
redhat
redhat
(RHSA-2013:0710) Important: puppet security update
2013-04-04 00:00:00
ubuntu
ubuntu
Puppet vulnerabilities
2013-03-12 00:00:00
securityvulns
securityvulns
Puppet multiple security vulnerabilities
2013-03-24 00:00:00
[USN-1759-1] Puppet vulnerabilities
2013-03-24 00:00:00
fedora
fedora
[SECURITY] Fedora 18 Update: puppet-3.1.1-1.fc18
2013-08-02 03:25:10
[SECURITY] Fedora 17 Update: puppet-2.7.21-2.fc17
2013-03-30 21:31:30
osv
osv
puppet - several issues
2013-03-12 00:00:00
suse
suse
Security update for puppet (important)
2013-04-03 23:07:06
debian
debian
[SECURITY] [DSA 2643-1] puppet security update
2013-03-12 22:48:19
gentoo
gentoo
Puppet: Multiple vulnerabilities
2013-08-23 00:00:00
oracle
oracle
Oracle Critical Patch Update - January 2014
2014-01-14 00:00:00