USN-4769-1: Salt vulnerabilities

It was discovered that Salt allowed remote attackers to write to arbitrary files via a special crafted file. An attacker could use this vulnerability to cause a DoS or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 ESM. CVE-2014-3563 Andreas Stieger discovered that Salt...

CVE-2014-3563

CVE-2014-3563 affects Salt (SaltStack) before 2014.1.10. The issue relates to insecure temporary file creation in components (seed.py, salt-ssh, salt-cloud), allowing local attackers to write to arbitrary files and potentially achieve DoS or arbitrary code execution. The available connected docum...

CVE-2014-3563

Removed by vendor...