CVE-2013-1057 — Improper Input Validation in Maas

CWE-20 — Improper Input Validation4 documents4 sources
Severity
4.4MEDIUMNVD
EPSS
0.1%
top 73.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Canonical MaasCanonical Ubuntu Linux
Timeline
PublishedNov 18
Latest updateMay 17

Description

Untrusted search path vulnerability in maas-import-pxe-files in MAAS before 13.10 allows local users to execute arbitrary code via a Trojan horse import_pxe_files configuration file in the current working directory.

CVSS vector

AV:L/AC:M/C:P/I:P/A:PExploitability: 3.4 | Impact: 6.4

Affected Packages1 packages

▶NVDcanonical/maas12.04.4+3

Also affects: Ubuntu Linux 12.04, 12.10, 13.04

🔴Vulnerability Details

2
GHSA
GHSA-hvgm-p4gp-w6qm: Untrusted search path vulnerability in maas-import-pxe-files in MAAS before 13↗2022-05-17
▶
CVEList
CVE-2013-1057: Untrusted search path vulnerability in maas-import-pxe-files in MAAS before 13↗2013-11-15
▶

📋Vendor Advisories

1
Ubuntu
MAAS vulnerabilities↗2013-11-07
▶