Lucene search
UbuntuUSN-1033-1HistoryDec 16, 2010 - 12:00 a.m.
Eucalyptus vulnerability
2010-12-1600:00:00
ubuntu.com
25
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.019 Low
EPSS
Percentile
88.6%
Releases
- Ubuntu 10.10
Packages
- eucalyptus - Elastic Utility Computing Architecture
Details
It was discovered that Eucalyptus did not verify password resets from
the Admin UI correctly. An unauthenticated remote attacker could issue
password reset requests to gain admin privileges in the Eucalyptus
environment.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 10.10 | noarch | eucalyptus-java-common | < 2.0+bzr1241-0ubuntu4.1 | UNKNOWN |
| Ubuntu | 10.10 | noarch | eucalyptus-cc | < 2.0+bzr1241-0ubuntu4.1 | UNKNOWN |
| Ubuntu | 10.10 | noarch | eucalyptus-cloud | < 2.0+bzr1241-0ubuntu4.1 | UNKNOWN |
| Ubuntu | 10.10 | noarch | eucalyptus-common | < 2.0+bzr1241-0ubuntu4.1 | UNKNOWN |
| Ubuntu | 10.10 | noarch | eucalyptus-gl | < 2.0+bzr1241-0ubuntu4.1 | UNKNOWN |
| Ubuntu | 10.10 | noarch | eucalyptus-nc | < 2.0+bzr1241-0ubuntu4.1 | UNKNOWN |
| Ubuntu | 10.10 | noarch | eucalyptus-sc | < 2.0+bzr1241-0ubuntu4.1 | UNKNOWN |
| Ubuntu | 10.10 | noarch | eucalyptus-udeb | < 2.0+bzr1241-0ubuntu4.1 | UNKNOWN |
| Ubuntu | 10.10 | noarch | eucalyptus-walrus | < 2.0+bzr1241-0ubuntu4.1 | UNKNOWN |
| Ubuntu | 10.10 | noarch | uec-component-listener | < 2.0+bzr1241-0ubuntu4.1 | UNKNOWN |
References
Related
openvas
openvas
Ubuntu Update for eucalyptus vulnerability USN-1033-1
2011-01-04 00:00:00
Ubuntu: Security Advisory (USN-1033-1)
2011-01-04 00:00:00
securityvulns
securityvulns
Eucalyptus unauthorized access
2010-12-17 00:00:00
[USN-1033-1] Eucalyptus vulnerability
2010-12-17 00:00:00
cvelist
cvelist
CVE-2010-3905
2010-12-22 20:00:00
cve
cve
CVE-2010-3905
2010-12-22 21:00:15
ubuntucve
ubuntucve
CVE-2010-3905
2010-12-16 00:00:00
nessus
nessus
Ubuntu 10.10 : eucalyptus vulnerability (USN-1033-1)
2010-12-17 00:00:00
prion
prion
Authentication flaw
2010-12-22 21:00:00
nvd
nvd
CVE-2010-3905
2010-12-22 21:00:15
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.019 Low
EPSS
Percentile
88.6%
Related for USN-1033-1