Fedora Update for eucalyptus FEDORA-2013-6117

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 18 : eucalyptus-3.2.2-1.fc18 (2013-6117)

Eucalyptus 3.2.1 contained two vulnerabilities related to its Walrus object store. The first CVE-2012-4067 was a parsing vulnerability which could allow a Denial of Service attack, and the second CVE-2013-2296 allowed unauthorized authenticated users to enable and access bucket activity logs. The...

CVE-2013-2296

CVE-2013-2296 affects Walrus in Eucalyptus prior to 3.2.2. The issue: GetBucketLoggingStatus, SetBucketLoggingStatus, and SetBucketVersioningStatus bucket operations do not verify authorization, allowing remote authenticated users to bypass restrictions on (1) modifying logging, (2) modifying ver...