193 matches found
CVE-2014-5037
Eucalyptus 4.0.0 through 4.0.1, when the log level is set to INFO, logs user and system passwords, which allows local users to obtain sensitive information by reading cloud-requests.log...
CVE-2014-5038
Eucalyptus 3.0.0 through 4.0.1, when the log level is set to DEBUG or lower, logs user and system passwords, which allows local users to obtain sensitive information by reading the cloud log files...
CVE-2014-5038
CVE-2014-5038 affects Eucalyptus 3.0.0–4.0.1. When the log level is DEBUG or lower, user and system passwords are logged in cloud log files, enabling local users to obtain sensitive information. Sources include NVD entries and Ubuntu/CVE records; the material does not provide a remediation detail...
CVE-2014-5037
CVE-2014-5037 affects Eucalyptus 4.0.0–4.0.1, where, when log level is INFO, the system logs user and system passwords to cloud-requests.log. This results in potential local information disclosure by reading the log file. The provided documents do not specify a concrete exploit path, affected com...
CVE-2014-5036
The Storage Controller SC component in Eucalyptus 3.4.2 through 4.0.x before 4.0.1, when Dell Equallogic SAN is used, logs the CHAP user credentials, which allows local users to obtain sensitive information by reading the logs...
CVE-2014-5036
The Storage Controller SC component in Eucalyptus 3.4.2 through 4.0.x before 4.0.1, when Dell Equallogic SAN is used, logs the CHAP user credentials, which allows local users to obtain sensitive information by reading the logs...
Information disclosure
The Storage Controller SC component in Eucalyptus 3.4.2 through 4.0.x before 4.0.1, when Dell Equallogic SAN is used, logs the CHAP user credentials, which allows local users to obtain sensitive information by reading the logs...
CVE-2014-5036
The Storage Controller SC component in Eucalyptus 3.4.2 through 4.0.x before 4.0.1, when Dell Equallogic SAN is used, logs the CHAP user credentials, which allows local users to obtain sensitive information by reading the logs...
CVE-2014-5036
The CVE-2014-5036 entry applies to Eucalyptus Storage Controller (SC) in versions 3.4.2–4.0.x prior to 4.0.1 when used with Dell EqualLogic SAN. The underlying issue is that CHAP user credentials are logged, enabling local users to read logs and obtain sensitive information, causing partial confi...
Eucalyptus Web Services拒绝服务漏洞
CVE ID:CVE-2013-4768 Eucalyptus是一款开源的软件基础结构，用来通过计算集群或工作站群实现弹性的、实用的云计算。 Eucalyptus web services网络清理代码存在错误，允许攻击者利用漏洞提交特殊的请求进行拒绝服务攻击。 0 Eucalyptus 3.x Eucalyptus 3.4.2版本已修复该漏洞，建议用户下载使用： https://www.eucalyptus.com...
CVE-2013-4768
The web services APIs in Eucalyptus 2.0 through 3.4.1 allow remote attackers to cause a denial of service via vectors related to the "network connection clean up code" and 1 Cloud Controller CLC, 2 Walrus, 3 Storage Controller SC, and 4 VMware Broker VB...
Code injection
The web services APIs in Eucalyptus 2.0 through 3.4.1 allow remote attackers to cause a denial of service via vectors related to the "network connection clean up code" and 1 Cloud Controller CLC, 2 Walrus, 3 Storage Controller SC, and 4 VMware Broker VB...
CVE-2013-4768
The web services APIs in Eucalyptus 2.0 through 3.4.1 allow remote attackers to cause a denial of service via vectors related to the "network connection clean up code" and 1 Cloud Controller CLC, 2 Walrus, 3 Storage Controller SC, and 4 VMware Broker VB...
CVE-2013-4768
CVE-2013-4768 affects Eucalyptus web services APIs (versions 2.0–3.4.1) and allows remote DoS via the network-connection clean-up code in core services: Cloud Controller, Walrus, Storage Controller, and VMware Broker. The issue is triggered by malformed requests, leading to partial availability i...
CVE-2013-4768
The web services APIs in Eucalyptus 2.0 through 3.4.1 allow remote attackers to cause a denial of service via vectors related to the "network connection clean up code" and 1 Cloud Controller CLC, 2 Walrus, 3 Storage Controller SC, and 4 VMware Broker VB...
Fedora Update for eucalyptus FEDORA-2013-6117
The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for eucalyptus FEDORA-2013-6117
Check for the Version of eucalyptus OpenVAS Vulnerability Test Fedora Update for eucalyptus FEDORA-2013-6117 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
Fedora 18 : eucalyptus-3.2.2-1.fc18 (2013-6117)
Eucalyptus 3.2.1 contained two vulnerabilities related to its Walrus object store. The first CVE-2012-4067 was a parsing vulnerability which could allow a Denial of Service attack, and the second CVE-2013-2296 allowed unauthorized authenticated users to enable and access bucket activity logs. The...
[SECURITY] Fedora 18 Update: eucalyptus-3.2.2-1.fc18
Eucalyptus is a service overlay that implements elastic computing using existing resources. The goal of Eucalyptus is to allow sites with existing clusters and server infrastructure to co-host an elastic computing service that is interface-compatible with Amazon AWS. This package contains the...