USN-4769-1: Salt vulnerabilities

It was discovered that Salt allowed remote attackers to write to arbitrary files via a special crafted file. An attacker could use this vulnerability to cause a DoS or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 ESM. CVE-2014-3563 Andreas Stieger discovered that Salt...

CVE-2014-3563

Multiple unspecified vulnerabilities in Salt aka SaltStack before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in 1 seed.py, 2 salt-ssh, or 3 salt-cloud...

CVE-2014-3563

CVE-2014-3563 affects Salt (SaltStack) before 2014.1.10. The issue relates to insecure temporary file creation in components (seed.py, salt-ssh, salt-cloud), allowing local attackers to write to arbitrary files and potentially achieve DoS or arbitrary code execution. The available connected docum...