CVE-2013-6433

Currently unrated

Key Information:

Vendor
Openstack
Status
Neutron
Vendor
CVE Published:
2 June 2014

Summary

The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap, which allows remote attackers to gain privileges via a crafted configuration file.

References

http://secunia.com/advisories/59533
third-party-advisoryx_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-2255-1
vendor-advisoryx_refsource_UBUNTU
http://rhn.redhat.com/errata/RHSA-2014-0516.html
vendor-advisoryx_refsource_REDHAT

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.