CVE-2013-1058

maas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files, which allows remote attackers to modify these files via a man-in-the-middle (MITM) attack.

Score

CVSS 2.0 5.8 Medium

Status

Modified - security@ubuntu.com

Published

2013-11-23

Last modified

2024-08-06

Weaknesses

CWE-310

Affected products

• Maas (Canonical)
• Ubuntu Linux (Canonical)

References

• http://secunia.com/advisories/55567
• http://www.ubuntu.com/usn/USN-2013-1
• https://bugs.launchpad.net/maas/%2Bbug/1039513
• https://launchpad.net/maas/+milestone/13.10