CVE Vulnerabilities

CVE-2013-1058

Published: Nov 23, 2013 | Modified: Nov 25, 2013
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5.8 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

maas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files, which allows remote attackers to modify these files via a man-in-the-middle (MITM) attack.

Affected Software

Name Vendor Start Version End Version
Ubuntu_linux Canonical 12.04 (including) 12.04 (including)
Ubuntu_linux Canonical 12.10 (including) 12.10 (including)
Ubuntu_linux Canonical 13.04 (including) 13.04 (including)
Maas Ubuntu precise *
Maas Ubuntu quantal *
Maas Ubuntu raring *

References