CVE-2013-1057

Related Files

Ubuntu Security Notice USN-2013-1

Posted Nov 7, 2013

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 2013-1 - It was discovered that maas-import-pxe-files incorrectly loaded configuration information from the current working directory. A local attacker could execute code as an administrator if maas-import-pxe-files were run from an attacker-controlled directory. It was discovered that maas-import-pxe-files doesn't cryptographically verify downloaded content. An attacker could modify images without detection. Various other issues were also addressed.

tags | advisory, local

systems | linux, ubuntu

advisories | CVE-2013-1057, CVE-2013-1058, CVE-2013-1057, CVE-2013-1058

SHA-256 | abfb080471077aa526f708385060f26bb47afecc1f1d5ba12e53f72663b04cdb

Download | Favorite | View