PT-2013-2846 · Canonical · Maas

Marc Deslauriers + 1 · Published 2013-11-23 · Updated 2013-11-25 · CVE-2013-1058

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions MAAS versions prior to 13.10

Description The issue allows remote attackers to modify downloaded files via a man-in-the-middle (MITM) attack because the integrity of these files is not verified.

Recommendations For versions prior to 13.10, update to version 13.10 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2013-1058

Affected Products

Maas

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2013-1058 · Security Note
• http://secunia.com/advisories/55567 · Vendor Advisory
• http://ubuntu.com/usn/USN-2013-1 · Vendor Advisory
• https://launchpad.net/maas/+milestone/13.10 · Note
• https://bugs.launchpad.net/maas/%2Bbug/1039513 · Note