Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

Ubuntu 13.04 USN-2004-1 Critical: Risk of Man In The Middle Attack

ubuntu
Calendar Grey October 23, 2013
Scroller Ubuntu
Security notice regarding python-glanceclient revealing confidential data during network transmission because of SSL validation vulnerabilities.
python-glanceclient could be made to expose sensitive information over the network.

Summary

python-glanceclient could be made to expose sensitive information over the

network.

Software Description:

- python-glanceclient: Client library for Openstack glance server.

Details:

Thomas Leaman discovered that the Python client library for Glance did not

properly verify SSL certificates. A remote attacker could exploit this to

perform a man in the middle attack.

Topics%20covered

Topics Covered

security advisory Ubuntu information disclosure man in the middle python-glanceclient

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.04:
  python-glanceclient             1:0.9.0-0ubuntu1.2

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2004-1

CVE-2013-4111

Severity
critical
Lowest
Low
Medium
High
Critical

=========================================================================Ubuntu Security Notice USN-2004-1

Topics%20covered

Topics Covered

security advisory Ubuntu information disclosure man in the middle python-glanceclient

Package Information

https://launchpad.net/ubuntu/+source/python-glanceclient/1:0.9.0-0ubuntu1.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.