CVE-2013-1057 - Untrusted search path vulnerability in maas-import-pxe-files in MAAS before 13.10 allows local users to execute arbitrary code via a Trojan horse import_pxe_files configuration file in the current working directory

Back Back to CVE browser

MEDIUM

Untrusted search path vulnerability in maas-import-pxe-files in MAAS before 13.10 allows local users to execute arbitrary code via a Trojan horse import_pxe_files configuration file in the current working directory

Published Nov 15, 2013

4.4

MEDIUM

CVSS 2.0

EPSS 0.59%

Description

Untrusted search path vulnerability in maas-import-pxe-files in MAAS before 13.10 allows local users to execute arbitrary code via a Trojan horse import_pxe_files configuration file in the current working directory.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (4)

http://secunia.com/advisories/55567
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://ubuntu.com/usn/usn-2013-1
vendor-advisoryx_refsource_UBUNTUVendor Advisory
https://bugs.launchpad.net/maas/+bug/1158425
x_refsource_CONFIRMExploit
https://launchpad.net/maas/+milestone/13.10
x_refsource_CONFIRM

Link	Providers	Tags
http://secunia.com/advisories/55567		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://ubuntu.com/usn/usn-2013-1		vendor-advisoryx_refsource_UBUNTUVendor Advisory
https://bugs.launchpad.net/maas/+bug/1158425		x_refsource_CONFIRMExploit
https://launchpad.net/maas/+milestone/13.10		x_refsource_CONFIRM