RHEL 6 : virt-v2v (RHSA-2011:1615)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:1615 advisory. - virt-v2v: vnc password protection is missing after vm conversion CVE-2011-1773 Note that Nessus has not tested for this issue but has instead relie...

CVE-2012-2137: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in virt/kvm/irqcomm.c in the KVM subsystem in the Linux kernel before 3.2.24 allows local users to cause a denial of service crash and possibly execute arbitrary code via vectors related to Message Signaled Interrupts MSI, irq routing entries, and an incorrect check by the...

[SECURITY] Fedora 18 Update: virt-viewer-0.5.3-6.fc18

Virtual Machine Viewer provides a graphical console client for connecting to virtual machines. It uses the GTK-VNC or SPICE-GTK widgets to provide the display, and libvirt for looking up VNC/SPICE server details...

PT-2012-1058

Name of the Vulnerable Software and Affected Versions virt-manager affected versions not specified Xen versions 3.3 and 4.x Description The issue is related to a potential denial of service, where exploitation can lead to a disruption in the availability of protected information. This can be...

CVE-2012-3447: Undefined Security Weakness

virt/disk/api.py in OpenStack Compute Nova 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image that uses a symlink that is only readable by root. NOTE: this vulnerability exists because of an...

Scientific Linux Security Update : virt-v2v on SL6.x x86_64

virt-v2v is a tool for converting and importing virtual machines to libvirt-managed KVM Kernel-based Virtual Machine. Using virt-v2v to convert a guest that has a password-protected VNC console to a KVM guest removed that password protection from the converted guest: after conversion, a password...

CVE-2012-3360

Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute Nova Folsom 2012.2 and Essex 2012.1, when used over libvirt-based hypervisors, allows remote authenticated users to write arbitrary files to the disk image via a .. dot dot in the path attribute of a file element...

CVE-2012-3361

virt/disk/api.py in OpenStack Compute Nova Folsom 2012.2, Essex 2012.1, and Diablo 2011.3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image...

CVE-2012-3360: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute Nova Folsom 2012.2 and Essex 2012.1, when used over libvirt-based hypervisors, allows remote authenticated users to write arbitrary files to the disk image via a .. dot dot in the path attribute of a file element...

PT-2012-6315

Name of the Vulnerable Software and Affected Versions OpenStack Compute Nova versions 2011.3 through 2012.2 Description The issue allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image. This is due to a problem in the virt/disk/api.py file...

PT-2012-4662

Name of the Vulnerable Software and Affected Versions OpenStack Compute Nova versions 2012.1 through 2012.2 Description The issue allows remote authenticated users to write arbitrary files to the disk image via a .. dot dot in the path attribute of a file element, specifically in virt/disk/api.py...

PT-2012-6314

Name of the Vulnerable Software and Affected Versions OpenStack Compute Nova versions 2012.1 through 2012.2 Description A directory traversal issue exists when OpenStack Compute Nova is used over libvirt-based hypervisors. This allows remote authenticated users to write arbitrary files to the dis...

CVE-2012-3361: Undefined Security Weakness

virt/disk/api.py in OpenStack Compute Nova Folsom 2012.2, Essex 2012.1, and Diablo 2011.3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image...

PT-2012-4663

Name of the Vulnerable Software and Affected Versions OpenStack Compute Nova versions 2011.3 through 2012.2 Description The issue allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image. This is possible due to a flaw in the virt/disk/api.py modul...

RedHat Update for virt-v2v RHSA-2011:1615-03

Check for the Version of virt-v2v OpenVAS Vulnerability Test RedHat Update for virt-v2v RHSA-2011:1615-03 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for virt-v2v RHSA-2011:1615-03

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-2690

virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information...

DEBIAN-CVE-2012-2690

virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information...

CVE-2012-2690

virt-edit in libguestfs before 1.18.0 does not preserve the permissions from the original file and saves the new file with world-readable permissions when editing, which might allow local guest users to obtain sensitive information...

CVE-2012-2690

CVE-2012-2690 affects libguestfs, where virt-edit fails to preserve source file permissions, saving edits with world-readable permissions. Local guest users could access sensitive data. The issue is addressed by updated libguestfs packages (e.g., >= 1.18.0 per RHSA-2012:0774 and related adviso...