Lucene search
Ubuntu.comUB:CVE-2013-7048HistoryJan 23, 2014 - 12:00 a.m.
CVE-2013-7048
2014-01-2300:00:00
ubuntu.com
ubuntu.com
9
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:P/A:N
0.0004 Low
EPSS
Percentile
5.1%
OpenStack Compute (Nova) Grizzly 2013.1.4, Havana 2013.2.1, and earlier
uses world-writable and world-readable permissions for the temporary
directory used to store live snapshots, which allows local users to read
and modify live snapshots.
Bugs
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732022>
- <https://bugs.launchpad.net/nova/+bug/1227027>
Notes
| Author | Note |
|---|---|
| mdeslaur | OSSA 2014-001 |
| jdstrand | affected code introduced in grizzly (Ubuntu 13.04) requires shell access on the compute node |
Related
nessus
nessus
Fedora 20 : openstack-nova-2013.2.2-1.fc20 (2014-2554)
2014-02-26 00:00:00
Fedora 19 : openstack-nova-2013.1.5-1.fc19 (2014-4188)
2014-04-03 00:00:00
cvelist
cvelist
CVE-2013-7048
2014-01-23 21:00:00
prion
prion
Design/Logic Flaw
2014-01-23 21:55:00
ibm
ibm
debiancve
debiancve
CVE-2013-7048
2014-01-23 21:55:04
cve
cve
CVE-2013-7048
2014-01-23 21:55:04
seebug
seebug
OpenStack Compute (Nova) 不安全目录权限漏洞
2013-12-13 00:00:00
github
github
OpenStack Nova live snapshots use an insecure local directory
2022-05-14 01:58:45
nvd
nvd
CVE-2013-7048
2014-01-23 21:55:04
redhat
redhat
(RHSA-2014:0366) Moderate: openstack-nova security and bug fix update
2014-04-03 00:00:00
(RHSA-2014:0231) Moderate: openstack-nova security and bug fix update
2014-03-04 00:00:00
openvas
openvas
Fedora Update for openstack-nova FEDORA-2014-2554
2014-02-25 00:00:00
Fedora Update for openstack-nova FEDORA-2014-2554
2014-02-25 00:00:00
Fedora Update for openstack-nova FEDORA-2014-4188
2014-04-03 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: openstack-nova-2013.2.2-1.fc20
2014-02-25 07:53:02
[SECURITY] Fedora 19 Update: openstack-nova-2013.1.5-1.fc19
2014-04-02 09:14:29
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:57:31
Privilege Escalation
2019-05-02 04:57:32
Infomation Disclosure
2019-05-02 04:57:32
3.3 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:P/A:N
0.0004 Low
EPSS
Percentile
5.1%
Related for UB:CVE-2013-7048