Ubuntu MAAS '/etc/maas/txlongpoll.yaml' Local Password Disclosure Vulnerability
BID:65569
Info
Ubuntu MAAS '/etc/maas/txlongpoll.yaml' Local Password Disclosure Vulnerability
| Bugtraq ID: | 65569 |
| Class: | Design Error |
| CVE: |
CVE-2013-1069 |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 22 2013 12:00AM |
| Updated: | Nov 22 2013 12:00AM |
| Credit: | James Troup |
| Vulnerable: |
Ubuntu Ubuntu Linux 13.10 Ubuntu Ubuntu Linux 12.10 Ubuntu Ubuntu Linux 12.04 LTS Ubuntu MAAS 0 |
| Not Vulnerable: | |
Exploit / POC
Ubuntu MAAS '/etc/maas/txlongpoll.yaml' Local Password Disclosure Vulnerability
Attackers require local interactive access to exploit this issue.
Attackers require local interactive access to exploit this issue.
Solution / Fix
Ubuntu MAAS '/etc/maas/txlongpoll.yaml' Local Password Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Ubuntu MAAS '/etc/maas/txlongpoll.yaml' Local Password Disclosure Vulnerability
References:
References:
- MAAS Homepage (Ubuntu)
- txlongpoll.yaml contains password but is world readable (James Troup)
- Ubuntu Homepage (Ubuntu)
- USN-2105-1: MAAS vulnerabilities (Ubuntu)