CVE-2013-6433 Information

Description

The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap which allows remote attackers to gain privileges via a crafted configuration file.

Reference

http://rhn.redhat.com/errata/RHSA-2014-0516.html http://secunia.com/advisories/59533 http://www.ubuntu.com/usn/USN-2255-1 https://bugzilla.redhat.com/show_bug.cgi?id=1039812