CVE-2011-3872

CVE-2011-3872, known as the "AltNames Vulnerability," affects Puppet 2.6.x before 2.6.12, 2.7.x before 2.7.6, and Puppet Enterprise versions 1.0, 1.1, and 1.2 before 1.2.4. This vulnerability allows a remote attacker to spoof a Puppet master through a man-in-the-middle (MITM) attack against an agent. The issue arises because the Puppet master's certdnsnames values are incorrectly added to the X.509 Subject Alternative Name field of an agent's certificate during signing, enabling spoofing when an agent uses an alternate DNS name for the master. The vulnerability has a CVSS score of 2.6 (low severity), indicating a network-based attack vector with high attack complexity and a potential impact of partial integrity compromise (I:P). There is no confidentiality or availability impact. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. Community discussion and media coverage are minimal, suggesting low public attention to this vulnerability.