CVE-2013-1058
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Ubuntu MAAS Server（Metal as a Service）是英国科能（Canonical）公司和Ubuntu基金会共同开发的一套云服务器部署和管理工具。该工具可对大量服务器的硬件环境进行集中部署并管理。 MAAS 13.10之前的版本中的maas-import-pxe-files配置文件中存在安全漏洞，该漏洞源于程序没有验证下载文件的完整性。远程攻击者可通过中间人攻击利用该漏洞修改下载的文件。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2013-1058
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
maas-import-pxe-files in MAAS before 13.10 does not verify the integrity of downloaded files, which allows remote attackers to modify these files via a man-in-the-middle (MITM) attack.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Ubuntu MAAS Server 中间人攻击漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ubuntu MAAS Server（Metal as a Service）是英国科能（Canonical）公司和Ubuntu基金会共同开发的一套云服务器部署和管理工具。该工具可对大量服务器的硬件环境进行集中部署并管理。 MAAS 13.10之前的版本中的maas-import-pxe-files配置文件中存在安全漏洞，该漏洞源于程序没有验证下载文件的完整性。远程攻击者可通过中间人攻击利用该漏洞修改下载的文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2013-1058
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2013-1058
请登录查看更多情报信息。
Vendor Advisories for CVE-2013-1058 (2)
Other References for CVE-2013-1058 (2)
-
🔗 https://launchpad.net/maas/+milestone/13.10 x_refsource_CONFIRM
-
🔗 https://bugs.launchpad.net/maas/%2Bbug/1039513 x_refsource_CONFIRM
Same Patch Batch · n/a · 2013-11-23 · 60 CVEs total
| CVE-2013-0867 | FFmpeg libavcodec/h264.c ‘decode_slice_header()’函数安全漏洞 | |
| CVE-2013-4509 | IBus 本地密码信息泄露漏洞 | |
| CVE-2013-6867 | SAP Sybase Adaptive Server Enterprise 安全漏洞 | |
| CVE-2013-6866 | SAP Sybase Adaptive Server Enterprise 安全漏洞 | |
| CVE-2013-6865 | SAP Sybase Adaptive Server Enterprise 安全漏洞 | |
| CVE-2013-6868 | SAP Sybase Adaptive Server Enterprise 安全漏洞 | |
| CVE-2013-4459 | LightDM ‘create_guest_session()’函数安全绕过漏洞 | |
| CVE-2013-2561 | OpenFabrics ibutils 不安全临时文件漏洞 | |
| CVE-2013-0869 | FFmpeg libavcodec/h264.c ‘field_end()’函数安全漏洞 | |
| CVE-2013-0868 | FFmpeg libavcodec/huffyuvdec.c文件整数溢出漏洞 | |
| CVE-2013-4547 | F5 Nginx 权限许可和访问控制漏洞 | |
| CVE-2013-0866 | FFmpeg libavcodec/aacdec.c ‘aac_decode_init()’函数边界错误漏洞 | |
| CVE-2013-0865 | FFmpeg libavcodec/vqavideo.c ‘vqa_decode_chunk()’函数边界错误漏洞 | |
| CVE-2013-0864 | FFmpeg libavcodec/gifdec.c ‘gif_copy_img_rect()’函数拒绝服务漏洞 | |
| CVE-2013-0863 | FFmpeg libavcodec/sanm.c ‘rle_decode’函数缓冲区溢出漏洞 | |
| CVE-2013-0862 | FFmpeg ‘ibavcodec/sanm.c process_frame_obj()’函数整数溢出漏洞 | |
| CVE-2013-0861 | FFmpeg ‘avcodec_decode_audio4’函数拒绝服务漏洞 | |
| CVE-2013-0860 | FFmpeg ‘ff_er_frame_end’函数拒绝服务漏洞 | |
| CVE-2013-0223 | GNU coreutils 缓冲区错误漏洞 | |
| CVE-2013-0222 | GNU coreutils 缓冲区错误漏洞 |
Showing top 20 of 60 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2013-1058
Anonymous User
2026-05-06 07:03:04test'
Anonymous User
2026-05-06 07:03:04'