CVE-2011-4596
CVE-2011-4596
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) manifest.
EPSS 1.8% · Fix available
- Published
- Updated
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
nova Debian:12
- Affected ranges
- ECOSYSTEM: < 2012.1~e1-4
Update to 2012.1~e1-4
nova Debian:13
- Affected ranges
- ECOSYSTEM: < 2012.1~e1-4
Update to 2012.1~e1-4
nova Debian:14
- Affected ranges
- ECOSYSTEM: < 2012.1~e1-4
Update to 2012.1~e1-4
nova PyPI
- Affected ranges
- ECOSYSTEM: < 12.0.0a0
Update to 12.0.0a0
Original sources
- https://github.com/openstack/nova/commit/ad3241929ea00569c74505ed002208ce360c667e
- https://bugs.launchpad.net/nova/+bug/894755
- https://lists.launchpad.net/openstack/msg06105.html
- https://github.com/openstack/nova/commit/76363226bd8533256f7795bba358d7f4b8a6c9e6
- https://bugs.launchpad.net/nova/+bug/885167
- https://nvd.nist.gov/vuln/detail/CVE-2011-4596