Lucene search
UbuntuUSN-1305-1HistoryDec 13, 2011 - 12:00 a.m.
Nova vulnerability
2011-12-1300:00:00
ubuntu.com
39
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
6.2
Confidence
Low
EPSS
0.005
Percentile
76.7%
Releases
- Ubuntu 11.10
Packages
- nova - OpenStack Compute cloud infrastructure
Details
David Black discovered that Nova did not properly perform input validation
during image registration. An attacker could exploit this by registering a
crafted image using the EC2 API or S3/RegisterImage method and overwrite
files as the nova user.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 11.10 | noarch | python-nova | < 2011.3-0ubuntu6.3 | UNKNOWN |
| Ubuntu | 11.10 | noarch | nova-ajax-console-proxy | < 2011.3-0ubuntu6.3 | UNKNOWN |
| Ubuntu | 11.10 | noarch | nova-api | < 2011.3-0ubuntu6.3 | UNKNOWN |
| Ubuntu | 11.10 | noarch | nova-common | < 2011.3-0ubuntu6.3 | UNKNOWN |
| Ubuntu | 11.10 | noarch | nova-compute | < 2011.3-0ubuntu6.3 | UNKNOWN |
| Ubuntu | 11.10 | noarch | nova-compute-kvm | < 2011.3-0ubuntu6.3 | UNKNOWN |
| Ubuntu | 11.10 | noarch | nova-compute-lxc | < 2011.3-0ubuntu6.3 | UNKNOWN |
| Ubuntu | 11.10 | noarch | nova-compute-uml | < 2011.3-0ubuntu6.3 | UNKNOWN |
| Ubuntu | 11.10 | noarch | nova-compute-xen | < 2011.3-0ubuntu6.3 | UNKNOWN |
| Ubuntu | 11.10 | noarch | nova-doc | < 2011.3-0ubuntu6.3 | UNKNOWN |
References
Related
cvelist
cvelist
CVE-2011-4596
2011-12-23 22:00:00
securityvulns
securityvulns
Nova unauthroized access
2011-12-19 00:00:00
prion
prion
Directory traversal
2011-12-23 22:55:00
nvd
nvd
CVE-2011-4596
2011-12-23 22:55:00
openvas
openvas
Ubuntu: Security Advisory (USN-1305-1)
2012-03-16 00:00:00
Ubuntu Update for nova USN-1305-1
2012-03-16 00:00:00
Fedora Update for openstack-nova FEDORA-2011-17111
2012-04-02 00:00:00
cve
cve
CVE-2011-4596
2011-12-23 22:55:00
nessus
nessus
Ubuntu 11.10 : nova vulnerability (USN-1305-1)
2011-12-14 00:00:00
Fedora 16 : openstack-nova-2011.3-13.fc16 (2011-17111)
2011-12-23 00:00:00
Fedora 16 : openstack-nova-2011.3.1-0.4.10818.fc16 (2012-0682)
2012-01-20 00:00:00
github
github
OpenStack Nova Multiple directory traversal vulnerabilities
2022-05-14 01:58:50
ubuntucve
ubuntucve
CVE-2011-4596
2011-12-13 00:00:00
debiancve
debiancve
CVE-2011-4596
2011-12-23 22:55:00
CVSS2
6
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
AI Score
6.2
Confidence
Low
EPSS
0.005
Percentile
76.7%
Related for USN-1305-1