The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows remote attackers to gain privileges via a crafted configuration file. NOTE: this vulnerability exists because of a CVE-2013-6433 regression.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Neutron | Openstack | 2014.1 (including) | 2014.1.2 (including) |
| Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 6 | RedHat | openstack-neutron-0:2014.1.2-4.el6ost | * |