{"id":"USN-2431-2","aliases":[],"status":"published","title":"maas regression","description":"USN-2431-1 fixed vulnerabilities in mod_wsgi. The security update exposed\nan issue in the MAAS package, causing a regression. This update fixes the\nproblem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n It was discovered that mod_wsgi incorrectly handled errors when setting up\n the working directory and group access rights. A malicious application\n could possibly use this issue to cause a local privilege escalation when\n using daemon mode.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2014-12-04T20:25:09Z","modified":"2026-02-10T04:40:51Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"maas","fixed_in":["1.5.4+bzr2294-0ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"maas","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.4+bzr2294-0ubuntu1.2"}]}],"versions":["1.4+bzr1693+dfsg-0ubuntu2","1.4+bzr1693+dfsg-0ubuntu3","1.4+bzr1789+dfsg-0ubuntu1","1.4+bzr1817+dfsg-0ubuntu1","1.4+bzr1820+dfsg-0ubuntu1","1.4+bzr1853+dfsg-0ubuntu1","1.5+bzr1909-0ubuntu1","1.5+bzr1948-0ubuntu1","1.5+bzr1948-0ubuntu2","1.5+bzr1951-0ubuntu1","1.5+bzr1976-0ubuntu1","1.5+bzr1977-0ubuntu1","1.5+bzr1977-0ubuntu2","1.5+bzr1977-0ubuntu3","1.5+bzr1977-0ubuntu4","1.5+bzr1977-0ubuntu5","1.5+bzr2204-0ubuntu1","1.5+bzr2227-0ubuntu1","1.5+bzr2230-0ubuntu1","1.5+bzr2236-0ubuntu1","1.5+bzr2252-0ubuntu1","1.5.1+bzr2269-0ubuntu0.1","1.5.2+bzr2282-0ubuntu0.2","1.5.4+bzr2294-0ubuntu1.1"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-2431-2","tags":["advisory"]},{"url":"https://launchpad.net/bugs/1399016","tags":["report"]}],"sources":{"osv":[{"id":"USN-2431-2","title":"maas regression","description":"USN-2431-1 fixed vulnerabilities in mod_wsgi. The security update exposed\nan issue in the MAAS package, causing a regression. This update fixes the\nproblem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n It was discovered that mod_wsgi incorrectly handled errors when setting up\n the working directory and group access rights. A malicious application\n could possibly use this issue to cause a local privilege escalation when\n using daemon mode.\n","status":"published","published":"2014-12-04T20:25:09Z","modified":"2026-02-10T04:40:51Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}