← Back

CVE-2013-1057

nvd nist
Published: Nov 18, 2013Modified: Apr 29, 2026

JSON object

Loading...
4.4
Vector
AV:L/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 3.4 / Impact: 6.4
Source: NVD

Description

Untrusted search path vulnerability in maas-import-pxe-files in MAAS before 13.10 allows local users to execute arbitrary code via a Trojan horse import_pxe_files configuration file in the current working directory.

Affected (7)

Canonical
2 products
Ubuntu Linux
Maas
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Ubuntu Linux
Version 12.04
Ubuntu Linux
Version 12.10
Ubuntu Linux
Version 13.04
Configuration B
4 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Maas
Up to 12.04.4
Maas
Version 12.04.1
Maas
Version 12.04.2
Maas
Version 12.04.3

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (8)

Source: security@ubuntu.com
Vendor Advisory
Source: security@ubuntu.com
Vendor Advisory
Source: security@ubuntu.com
Exploit
Source: security@ubuntu.com
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.