CVE-2013-1058
First published: Sat Nov 23 2013(Updated: )
maas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files, which allows remote attackers to modify these files via a man-in-the-middle (MITM) attack.
Credit: security@ubuntu.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ubuntu Linux | =12.04 | |
| Ubuntu Linux | =12.10 | |
| Ubuntu Linux | =13.04 | |
| Canonical Metal As A Service | <=12.04.4 | |
| Canonical Metal As A Service | =12.04.1 | |
| Canonical Metal As A Service | =12.04.2 | |
| Canonical Metal As A Service | =12.04.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-1058?
CVE-2013-1058 is rated as a medium severity vulnerability due to its potential impact from man-in-the-middle attacks.
How do I fix CVE-2013-1058?
To fix CVE-2013-1058, update MAAS to a version that verifies the integrity of downloaded files.
What versions are affected by CVE-2013-1058?
CVE-2013-1058 affects MAAS versions up to and including 12.04.4 and various Ubuntu versions including 12.04, 12.10, and 13.04.
What type of attack does CVE-2013-1058 facilitate?
CVE-2013-1058 facilitates remote attacks through man-in-the-middle (MITM) attacks allowing file modification.
What is the impact of CVE-2013-1058 on system integrity?
CVE-2013-1058 compromises system integrity as it allows unauthorized modifications to downloaded files.
- agent/references
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/author
- agent/weakness
- agent/severity
- agent/description
- agent/event
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/canonical
- canonical/ubuntu linux
- version/ubuntu linux/12.04
- version/ubuntu linux/12.10
- version/ubuntu linux/13.04
- canonical/canonical metal as a service
- version/canonical metal as a service/12.04.4
- version/canonical metal as a service/12.04.1
- version/canonical metal as a service/12.04.2
- version/canonical metal as a service/12.04.3