CVE-2013-7450

Description

References

• openwall.com/lists/oss-security/2016/04/18/11 · Mailing List
• openwall.com/lists/oss-security/2016/04/18/5 · Mailing List
• openwall.com/lists/oss-security/2016/05/20/1 · Mailing List
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• pulp/pulp#627 · Issue Tracking

pulp의 다른 취약점

• CVE-2018-10917보통 6.5pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to l…
• CVE-2018-1090높음 7.5In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and then become readable to all users with rea…
• CVE-2015-5263높음 8.1pulp-consumer-client 2.4.0 through 2.6.3 does not check the server's TLS certificate signatures when retrieving the server's public key upon…
• CVE-2016-3704높음 7.5Pulp before 2.8.5 uses bash's $RANDOM in an unsafe way to generate passwords.
• CVE-2016-3696보통 5.5The pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows local users to obtain the CA key.