CVE-2013-1057

Published: 18 September 2013

Untrusted search path vulnerability in maas-import-pxe-files in MAAS before 13.10 allows local users to execute arbitrary code via a Trojan horse import_pxe_files configuration file in the current working directory.

Priority

Status

Package	Release	Status
maas Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Released (1.2+bzr1373+dfsg-0ubuntu1~12.04.4)
	quantal	Released (1.2+bzr1373+dfsg-0ubuntu1.1)
	raring	Released (1.3+bzr1461+dfsg-0ubuntu2.3)
	saucy	Not vulnerable
	upstream	Needs triage

References

https://ubuntu.com/security/notices/USN-2013-1
https://www.cve.org/CVERecord?id=CVE-2013-1057
NVD
Launchpad
Debian

Bugs

https://bugs.launchpad.net/maas/+bug/1158425

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›