PT-2014-2465

CVE-2013-1068

·

Published

2014-06-17

·

Updated

2014-06-20

Description by

CVSS 2.0
5.0
Medium
MetricsAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions OpenStack Nova (python-nova) versions 1:2013.2.3-0 through 1:2013.2.3-0ubuntu1.1 and versions 1:2014.1-0 through 1:2014.1-0ubuntu1.1 OpenStack Cinder (python-cinder) versions 1:2013.2.3-0 through 1:2013.2.3-0ubuntu1.0 and versions 1:2014.1-0 through 1:2014.1-0ubuntu1.0
Description The issue makes it easier for attackers to gain privileges by leveraging another vulnerability, due to improper sudo configuration setting.
Recommendations For OpenStack Nova (python-nova) versions 1:2013.2.3-0 through 1:2013.2.3-0ubuntu1.1, update to version 1:2013.2.3-0ubuntu1.2 or later. For OpenStack Nova (python-nova) versions 1:2014.1-0 through 1:2014.1-0ubuntu1.1, update to version 1:2014.1-0ubuntu1.2 or later. For OpenStack Cinder (python-cinder) versions 1:2013.2.3-0 through 1:2013.2.3-0ubuntu1.0, update to version 1:2013.2.3-0ubuntu1.1 or later. For OpenStack Cinder (python-cinder) versions 1:2014.1-0 through 1:2014.1-0ubuntu1.0, update to version 1:2014.1-0ubuntu1.1 or later.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2013-1068
USN-2247-1
USN-2248-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com