« Volver al listado

CVE-2013-1068

Estado: ModificadaMedia (5)—

Los paquetes OpenStack Nova (python-nova) 1:2013.2.3-0 anterior a 1:2013.2.3-0ubuntu1.2 y 1:2014.1-0 anterior a 1:2014.1-0ubuntu1.2 y Openstack Cinder (python-cinder) 1:2013.2.3-0 anterior a 1:2013.2.3-0ubuntu1.1 y 1:2014.1-0 anterior a 1:2014.1-0ubuntu1.1 para Ubuntu 13.10 y 14.04 LTS no configura debidamente la configuración sudo, lo que facilita a atacantes ganar privilegios mediante el aprovechamiento de otra vulnerabilidad.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Canonical — Ubuntu Linux

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-1068",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "security@ubuntu.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-06-19T15:55:06.387",
  "references": [
    {
      "url": "http://ubuntu.com/usn/usn-2248-1",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "security@ubuntu.com"
    },
    {
      "url": "http://www.ubuntu.com/usn/USN-2247-1",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "security@ubuntu.com"
    },
    {
      "url": "http://ubuntu.com/usn/usn-2248-1",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ubuntu.com/usn/USN-2247-1",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The OpenStack Nova (python-nova) package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.2 and 1:2014.1-0 before 1:2014.1-0ubuntu1.2 and Openstack Cinder (python-cinder) package 1:2013.2.3-0 before 1:2013.2.3-0ubuntu1.1 and 1:2014.1-0 before 1:2014.1-0ubuntu1.1 for Ubuntu 13.10 and 14.04 LTS does not properly set the sudo configuration, which makes it easier for attackers to gain privileges by leveraging another vulnerability."
    },
    {
      "lang": "es",
      "value": "Los paquetes OpenStack Nova (python-nova) 1:2013.2.3-0 anterior a 1:2013.2.3-0ubuntu1.2 y 1:2014.1-0 anterior a 1:2014.1-0ubuntu1.2 y Openstack Cinder (python-cinder) 1:2013.2.3-0 anterior a 1:2013.2.3-0ubuntu1.1 y 1:2014.1-0 anterior a 1:2014.1-0ubuntu1.1 para Ubuntu 13.10 y 14.04 LTS no configura debidamente la configuración sudo, lo que facilita a atacantes ganar privilegios mediante el aprovechamiento de otra vulnerabilidad."
    }
  ],
  "lastModified": "2026-06-16T23:50:48.377",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7F61F047-129C-41A6-8A27-FFCBB8563E91"
            },
            {
              "criteria": "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B5A6F2F3-4894-4392-8296-3B8DD2679084"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@ubuntu.com"
}