CVE-2013-4437

Unspecified vulnerability in salt-ssh in Salt aka SaltStack 0.17.0 has unspecified impact and vectors related to "insecure Usage of /tmp."...

CVE-2013-4435

Salt (SaltStack) CVE-2013-4435 affects versions 0.15.0–0.17.0 where remote authenticated users with external authentication or client ACLs can embed a routine inside another to execute restricted routines. The vulnerability stems from insufficient access control/argument handling in multiple modu...

PT-2013-5015

Name of the Vulnerable Software and Affected Versions Salt aka SaltStack version 0.17.0 Description The issue concerns the default configuration of salt-ssh in Salt, which does not validate the SSH host key of requests. This allows remote attackers to potentially conduct a man-in-the-middle MITM...

PT-2013-6050

Name of the Vulnerable Software and Affected Versions Salt aka SaltStack versions 0.11.0 through 0.17.0 Description The issue is related to the salt master in Salt not properly dropping group privileges. This makes it easier for remote attackers to gain privileges. Recommendations For Salt aka...

PT-2013-5018

Name of the Vulnerable Software and Affected Versions Salt aka SaltStack versions 0.15.0 through 0.17.0 Description The issue allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key. Recommendations For versions 0.15.0 through 0.17.0, update to a...

CVE-2013-4439: Undefined Security Weakness

Salt aka SaltStack before 0.15.0 through 0.17.0 allows remote authenticated minions to impersonate arbitrary minions via a crafted minion with a valid key...

CVE-2013-4437: Undefined Security Weakness

Unspecified vulnerability in salt-ssh in Salt aka SaltStack 0.17.0 has unspecified impact and vectors related to "insecure Usage of /tmp."...

CVE-2013-4436: Improper Input Validation

The default configuration for salt-ssh in Salt aka SaltStack 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via a man-in-the-middle MITM attack...

CVE-2013-6617: Undefined Security Weakness

The salt master in Salt aka SaltStack 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attackers to gain privileges...

CVE-2013-4438: Improper Control of Generation of Code

Salt aka SaltStack before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to be loaded has already been determined to be safe...

PT-2013-5016

Name of the Vulnerable Software and Affected Versions Salt aka SaltStack version 0.17.0 Description The issue is related to an unspecified vulnerability in salt-ssh, which has to do with "insecure Usage of /tmp." The impact and vectors of this issue are not specified. Recommendations For Salt aka...

PT-2013-5014

Name of the Vulnerable Software and Affected Versions Salt aka SaltStack versions 0.15.0 through 0.17.0 Description The issue allows remote authenticated users who are using external authentication or client ACL to execute restricted routines. This is achieved by embedding the restricted routine ...

PT-2013-5017

Name of the Vulnerable Software and Affected Versions Salt aka SaltStack versions prior to 0.17.1 Description The issue allows remote attackers to execute arbitrary YAML code. The vendor has noted that this might not be considered a vulnerability because the YAML to be loaded has already been...

CVE-2013-4435: Improper Authentication

Salt aka SaltStack 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another routine...

Fedora Update for salt FEDORA-2013-19354

Check for the Version of salt OpenVAS Vulnerability Test Fedora Update for salt FEDORA-2013-19354 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for salt FEDORA-2013-19356

Check for the Version of salt OpenVAS Vulnerability Test Fedora Update for salt FEDORA-2013-19356 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora 18 : salt-0.17.1-1.fc18 (2013-19354)

Updated to bugfix release 0.17.1. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...

Fedora Update for salt FEDORA-2013-19354

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for salt FEDORA-2013-19356

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 18 Update: salt-0.17.1-1.fc18

Salt is a distributed remote execution system used to execute commands and query data. It was developed in order to bring the best solutions found in the world of remote execution together and make them better, faster and more malleable. Salt accomplishes this via its ability to handle larger loa...