CVE-2014-5279

The Docker daemon managed by boot2docker 1.2 and earlier improperly enables unauthenticated TCP connections by default, which makes it easier for remote attackers to gain privileges or execute arbitrary code from children containers.

The Docker daemon managed by boot2docker 1.2 and earlier improperly enables unauthenticated TCP connections by default, which makes it easier for remote attackers to gain privileges or execute arbitrary code from children containers.

El demonio Docker, gestionado por boot2docker 1.2 y anteriores, habilita erróneamente las conexiones TCP no autenticadas por defecto, lo que facilita que atacantes remotos obtengan privilegios o ejecuten código arbitrario de contenedores secundarios.