CVE-2013-1058 — Maas vulnerability

CWE-3104 documents4 sources
Severity
5.8MEDIUMNVD
EPSS
0.7%
top 28.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Canonical MaasCanonical Ubuntu Linux
Timeline
PublishedNov 23
Latest updateMay 17

Description

maas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files, which allows remote attackers to modify these files via a man-in-the-middle (MITM) attack.

CVSS vector

AV:N/AC:M/C:N/I:P/A:PExploitability: 8.6 | Impact: 4.9

Affected Packages1 packages

▶NVDcanonical/maas12.04.4+3

Also affects: Ubuntu Linux 12.04, 12.10, 13.04

🔴Vulnerability Details

2
GHSA
GHSA-8w53-636j-4w2w: maas-import-pxe-files in MAAS before 13↗2022-05-17
▶
CVEList
CVE-2013-1058: maas-import-pxe-files in MAAS before 13↗2013-11-23
▶

📋Vendor Advisories

1
Ubuntu
MAAS vulnerabilities↗2013-11-07
▶
CVE-2013-1058 — Canonical Maas vulnerability | cvebase