Vulnerability in Canonical Ubuntu Linux
CVE-2013-1068
The OpenStack Nova (python-nova) package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.2 and 1:2014.1-0 before 1:2014.1-0ubuntu1.2 and Openstack Cinder (python-cinder) package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.1 and 1:2014.1-0 before 1:2014.1-0ubuntu1.1 for Ubuntu 13.10 and 14.04 LTS does not properly set the sudo configuration, which makes it easier for attackers to gain privileges by leveraging another vulnerability.
EPSS: 0.012 (64.8th percentile) — read the EPSS interpretation.
Affected products
- Canonical Ubuntu_linux — versions 13.10, 14.04
- N/a — versions n/a
Weakness classification (CWE)
References
- security@ubuntu.com (x_refsource_UBUNTU, vendor-advisory, Patch, Vendor Advisory)
- security@ubuntu.com (x_refsource_UBUNTU, vendor-advisory, Patch, Vendor Advisory)