CVE-2013-1070

Related Files

Ubuntu Security Notice USN-2105-1

Posted Feb 14, 2014

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 2105-1 - James Troup discovered that MAAS stored RabbitMQ authentication credentials in a world-readable file. A local authenticated user could read this password and potentially gain privileges of other user accounts. This update restricts the file permissions to prevent unintended access. Chris Glass discovered that the MAAS API was vulnerable to cross-site scripting vulnerabilities. With cross-site scripting vulnerabilities, if a user were tricked into viewing a specially crafted page, a remote attacker could exploit this to modify the contents, or steal confidential data, within the same domain. Various other issues were also addressed.

tags | advisory, remote, local, vulnerability, xss

systems | linux, ubuntu

advisories | CVE-2013-1070, CVE-2013-1069, CVE-2013-1069, CVE-2013-1070

SHA-256 | b3b580b276826bc153e8f810e4aa0d9ddaf93bffecd797cccea9a87b941157b3

Download | Favorite | View