Description (CNA)
Untrusted search path vulnerability in maas-import-pxe-files in MAAS before 13.10 allows local users to execute arbitrary code via a Trojan horse import_pxe_files configuration file in the current working directory.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://ubuntu.com/usn/usn-2013-1
- https://bugs.launchpad.net/maas/+bug/1158425
- http://secunia.com/advisories/55567
- https://launchpad.net/maas/+milestone/13.10
ADP enrichment
No English description supplied.