128 matches found
CVE-2014-1428
The CVE-2014-1428 entry concerns Ubuntu MAAS and the generate_filestorage_key function. Affected: MAAS versions prior to 1.9.2. Issue: vulnerability that allows an attacker to brute-force filenames due to flaws in key/identifier generation. Impact details are limited to the described statment; ex...
CVE-2014-1428 uuid.uuid1() is not suitable as an unguessable identifier/token
A vulnerability in generatefilestoragekey of Ubuntu MAAS allows an attacker to brute-force filenames. This issue affects Ubuntu MAAS versions prior to 1.9.2...
CVE-2014-1427 MAAS API vulnerable to CSRF attack
A vulnerability in the REST API of Ubuntu MAAS allows an attacker to cause a logged-in user to execute commands via cross-site scripting. This issue affects MAAS versions prior to 1.9.2...
CVE-2015-1320
The CVE describes a credential disclosure issue in the SeaMicro provisioning used by Ubuntu MAAS: credentials (username and password) are logged by the management interface. Affected are MAAS versions before 1.9.2. This is tied to the SeaMicro provisioning flow and exposes sensitive data via logs...
CVE-2015-1320 Probe-and-enlist for SeaMicro chassis writes password to the log
The SeaMicro provisioning of Ubuntu MAAS logs credentials, including username and password, for the management interface. This issue affects Ubuntu MAAS versions prior to 1.9.2...
CVE-2014-1426
CVE-2014-1426 concerns a vulnerability in MAAS (Ubuntu MAAS) where maasserver.api.get_file_by_name can be abused by unauthenticated network clients to download arbitrary files. Affected: MAAS versions prior to 1.9.2. The underlying issue is not fully detailed in the provided documents, but the im...
CVE-2014-1426 get_file_by_name does not check owner
A vulnerability in maasserver.api.getfilebyname of Ubuntu MAAS allows unauthenticated network clients to download any file. This issue affects: Ubuntu MAAS versions prior to 1.9.2...
Hackers Leak Personal Data from Hundreds of German Politicians On Twitter
Germany has been hit with the biggest hack in its history. A group of unknown hackers has leaked highly-sensitive personal data from more than 100 German politicians, including German Chancellor Angela Merkel, Brandenburg's prime minister Dietmar Woidke, along with some German artists, journalist...
maas-int.dk XSS vulnerability
Open Bug Bounty ID: OBB-528273 Description| Value ---|--- Affected Website:| maas-int.dk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated Disclosure based o...
New Mac Malware-as-a-Service offerings
A couple weeks ago, two new Malware-as-a-Service MaaS offerings for the Mac became available. These two offerings - a backdoor named MacSpy and a ransomware app named MacRansom - were discovered by Catalin Cimpanu of Bleeping Computer on May 25. Cimpanu evidently had some trouble getting hold of...
Russian Hacker Pleads Guilty to Developing and Distributing Citadel Trojan
A Russian man accused of developing and distributing the Citadel Banking Trojan, which infected nearly 11 Million computers globally and caused over $500 Million in losses, has finally pleaded guilty to charges of computer fraud. Mark Vartanyan, 29, who was very well known as "Kolypto," pleaded...
Ubuntu 14.04 LTS : Simple Streams regression (USN-2746-2)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2746-2 advisory. USN-2746-1 fixed a vulnerability in Simple Streams. The update caused a regression preventing MAAS from downloading PXE images. This update fixes the problem. We...
Ubuntu: Security Advisory (USN-2746-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
maas-impresion.com.mx XSS vulnerability
Vulnerable URL: http://www.maas-impresion.com.mx/buscar.html?keywords=%3Cimg/src=x+onerror=prompt%28/XSSPOSED/%29;%3E∧=0 Details: Description| Value ---|--- Patched:| Yes, at 22.11.2017 Latest check for patch:| 22.11.2017 08:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclose...
Ubuntu 14.04 LTS : MAAS regression (USN-2431-2)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2431-2 advisory. USN-2431-1 fixed vulnerabilities in modwsgi. The security update exposed an issue in the MAAS package, causing a regression. This update fixes the problem. We...
USN-2431-2: MAAS regression
USN-2431-1 fixed vulnerabilities in modwsgi. The security update exposed an issue in the MAAS package, causing a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that modwsgi incorrectly handled errors when setting up the...
USN-2431-2 maas regression
USN-2431-1 fixed vulnerabilities in modwsgi. The security update exposed an issue in the MAAS package, causing a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that modwsgi incorrectly handled errors when setting up the...
[USN-2105-1] MAAS vulnerabilities
========================================================================== Ubuntu Security Notice USN-2105-1 February 13, 2014 maas vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...
