Description
maas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files, which allows remote attackers to modify these files via a man-in-the-middle (MITM) attack.
References (4)
Core 4
Core References
Issue Tracking x_refsource_confirm
https://bugs.launchpad.net/maas/%2Bbug/1039513
Vendor Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2013-1
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/55567
Various Sources x_refsource_confirm
https://launchpad.net/maas/+milestone/13.10
Scores
EPSS
0.0194
EPSS Percentile
77.9%
Details
CWE
CWE-310
Status
published
Products (7)
canonical/maas
12.04.1
canonical/maas
12.04.2
canonical/maas
12.04.3
canonical/maas
< 12.04.4
canonical/ubuntu_linux
12.04
canonical/ubuntu_linux
12.10
canonical/ubuntu_linux
13.04
Published
Nov 23, 2013
Tracked Since
Feb 18, 2026