CVE-2014-3632 The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allo...
HighCVSS 7.6
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows remote attackers to gain privileges via a crafted configuration file. NOTE: this vulnerability exists because of a CVE-2013-6433 regression.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenStack Neutron | >= 2014.1, <= 2014.1.2 | No fix listed |
References
- RHSA-2014:1339 vendor-advisory
- Debian Security Tracker CVE-2014-3632 vendor-advisory