Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2013-6433

Опубликовано: 29 мая 2014
Источник: redhat
CVSS2: 6.2

Описание

The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap, which allows remote attackers to gain privileges via a crafted configuration file.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat OpenStack Platform 3openstack-quantumWill not fix
OpenStack 4 for RHEL 6openstack-neutronFixedRHSA-2014:051629.05.2014

Показывать по

Дополнительная информация

Статус:

Low
https://bugzilla.redhat.com/show_bug.cgi?id=1039812openstack-quantum/openstack-neutron: rootwrap sudo config allows potential privilege escalation

6.2 Medium

CVSS2

Связанные уязвимости

ubuntu
около 12 лет назад

The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap, which allows remote attackers to gain privileges via a crafted configuration file.

nvd
около 12 лет назад

The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap, which allows remote attackers to gain privileges via a crafted configuration file.

debian
около 12 лет назад

The default configuration in the Red Hat openstack-neutron package bef ...

github
около 4 лет назад

The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap, which allows remote attackers to gain privileges via a crafted configuration file.

6.2 Medium

CVSS2