virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://secunia.com/advisories/49763 | third-party-advisory x_refsource_SECUNIA |
| https://review.openstack.org/#/c/9268/ | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/54278 | vdb-entry x_refsource_BID |
| https://bugs.launchpad.net/nova/+bug/1015531 | x_refsource_CONFIRM |
| http://secunia.com/advisories/49802 | third-party-advisory x_refsource_SECUNIA |
| http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083969.html | vendor-advisory x_refsource_FEDORA |
| https://lists.launchpad.net/openstack/msg14089.html | mailing-list x_refsource_MLIST |
| http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083984.html | vendor-advisory x_refsource_FEDORA |
| https://github.com/openstack/nova/commit/2427d4a99bed35baefd8f17ba422cb7aae8dcca7 | x_refsource_CONFIRM |
| https://github.com/openstack/nova/commit/b0feaffdb2b1c51182b8dce41b367f3449af5dd9 | x_refsource_CONFIRM |
| http://www.ubuntu.com/usn/USN-1497-1 | vendor-advisory x_refsource_UBUNTU |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|