Ubuntu: Security Advisory (USN-1305-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-4596

Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted 1 tarball or 2 manifest...

Directory traversal

Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted 1 tarball or 2 manifest...

Ubuntu 11.10 : nova vulnerability (USN-1305-1)

David Black discovered that Nova did not properly perform input validation during image registration. An attacker could exploit this by registering a crafted image using the EC2 API or S3/RegisterImage method and overwrite files as the nova user. Note that Tenable Network Security has extracted t...

USN-1305-1: Nova vulnerability

David Black discovered that Nova did not properly perform input validation during image registration. An attacker could exploit this by registering a crafted image using the EC2 API or S3/RegisterImage method and overwrite files as the nova user...

CVE-2011-4596

Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted 1 tarball or 2 manifest...

Researchers Find SpyEye Operations Hosted on Amazon's S3

Cybercriminals are increasingly turning to cloud storage services to distribute their malware, and not just the free ones, according to virus researchers at Kaspersky Lab. According to a new post on Securelist, Kaspersky’s research blog, cybercriminals have been using Amazon’s Simple Storage...

Amazon S3 Information Disclosure

I'm not sure if this is the right channel, but I stumbled upon this while trying to manage some of my own files. Although I didn't to get anything further than a list, I'm guessing there's a lot more than could be done. This is an Amazon S3 bucket exploit/bug. Requirement: Have an amazon s3 accou...

Unfixed XSS vulnerability at s3.gladiatus.org

Security researcher Uber0n, has submitted on 14/06/2008 a cross-site-scripting XSS vulnerability affecting s3.gladiatus.org, which at the time of submission ranked 32792 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/06/2009. It is currentl...

Unfixed XSS vulnerability at s3.shinystat.com

Security researcher Uber0n, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting s3.shinystat.com, which at the time of submission ranked 5864 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is currently...

Unfixed XSS vulnerability at s3.accesoperu.com

Security researcher Norehem, has submitted on 08/08/2007 a cross-site-scripting XSS vulnerability affecting s3.accesoperu.com, which at the time of submission ranked 152195 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/08/2007. It is...

Unfixed XSS vulnerability at s3.gladiatus.net

Security researcher THE-SH0CK-B0Y, has submitted on 05/07/2007 a cross-site-scripting XSS vulnerability affecting s3.gladiatus.net, which at the time of submission ranked 174969 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2007. It is...

CVE-2007-2053

Multiple stack-based buffer overflows in AFFLIB before 2.2.6 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via 1 a long LastModified value in an S3 XML response in lib/s3.cpp; 2 a long a path or b bucket in an S3 URL in lib/vnodes3.cpp; or 3 a long c...

Format string

Multiple format string vulnerabilities in AFFLIB 2.2.6 allow remote attackers to execute arbitrary code via certain command line parameters, which are used in 1 warn and 2 err calls, possibly involving a lib/s3.cpp, b tools/afconvert.cpp, c tools/afcopy.cpp, d tools/afinfo.cpp, e aimage/imager.cp...

Format string

Multiple format string vulnerabilities in AFFLIB before 2.2.6 allow remote attackers to execute arbitrary code via certain command line parameters, which are used in 1 warn and 2 err calls in a lib/s3.cpp, b tools/afconvert.cpp, c tools/afcopy.cpp, d tools/afinfo.cpp, e aimage/aimage.cpp, f...

Stack overflow

Multiple stack-based buffer overflows in AFFLIB before 2.2.6 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via 1 a long LastModified value in an S3 XML response in lib/s3.cpp; 2 a long a path or b bucket in an S3 URL in lib/vnodes3.cpp; or 3 a long c...

CVE-2007-2053

Multiple stack-based buffer overflows in AFFLIB before 2.2.6 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via 1 a long LastModified value in an S3 XML response in lib/s3.cpp; 2 a long a path or b bucket in an S3 URL in lib/vnodes3.cpp; or 3 a long c...

AFFLIB多个格式串处理漏洞

AFFLIB是用于操作高级取证格式（AFF）文件的开源函数库。 AFFLIB的一些命令行工具实现上存在格式串处理漏洞，本地攻击者可能利用此漏洞提升自己的权限。 这些工具以格式串参数向warn和err调用传输一些命令行参数。如果攻击者能够影响这些命令行参数的话，就可能导致执行任意指令。 s3格式串注入 文件：lib/s3.cpp 行数：207 err调用中的一个命令行参数用作了格式串，如果攻击者能够影响名称的话就可以导致格式串注入漏洞。192-207行说明了这个问题： void s3cpconst char fname,string key struct s3headers meta2 =...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:123)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The kernel did not clear sockaddrin.sinzero before returning IPv4 socket names for the getsockopt function, which could allow a local user to obtain portions of potentially sensitive memory if getsockopt is called...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:086)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Prior to Linux kernel 2.6.16.5, the kernel does not properly handle uncanonical return addresses on Intel EM64T CPUs which causes the kernel exception handler to run on the user stack with the wrong GS...