CVE-2013-1058: Medium severity Canonical Ubuntu Linux vulnerability
Published Nov 23, 2013
·Updated
maas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files, which allows remote attackers to modify these files via a man-in-the-middle (MITM) attack.
Affected Software
7 affected components
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=12.10
Canonical Ubuntu Linux=13.04
Canonical Maas<=12.04.4
Canonical Maas=12.04.1
Canonical Maas=12.04.2
Canonical Maas=12.04.3
Event History
Nov 23, 2013
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-1058?
CVE-2013-1058 is rated as a medium severity vulnerability due to its potential impact from man-in-the-middle attacks.
2
How do I fix CVE-2013-1058?
To fix CVE-2013-1058, update MAAS to a version that verifies the integrity of downloaded files.
3
What versions are affected by CVE-2013-1058?
CVE-2013-1058 affects MAAS versions up to and including 12.04.4 and various Ubuntu versions including 12.04, 12.10, and 13.04.
4
What type of attack does CVE-2013-1058 facilitate?
CVE-2013-1058 facilitates remote attacks through man-in-the-middle (MITM) attacks allowing file modification.
5
What is the impact of CVE-2013-1058 on system integrity?
CVE-2013-1058 compromises system integrity as it allows unauthorized modifications to downloaded files.