Oval Definition:oval:com.ubuntu.precise:def:20143251000
Revision Date:2014-08-12Version:1
Title:CVE-2014-3251 on Ubuntu 12.04 LTS (precise) - medium.
Description:The MCollective aes_security plugin, as used in Puppet Enterprise before 3.3.0 and Mcollective before 2.5.3, does not properly validate new server certificates based on the CA certificate, which allows local users to establish unauthorized Mcollective connections via unspecified vectors related to a race condition.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2014-3251
Platform(s):Ubuntu 12.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 12.04 LTS (precise) is installed.
  • AND The 'mcollective' package in precise is affected and needs fixing.
    • BACK