CVE

Id
48642  
CVE No.
CVE-2011-0730  
Status
Candidate  
Description
Eucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC) and other products, do not properly interpret signed elements in SOAP requests, which allows man-in-the-middle attackers to execute arbitrary commands by modifying a request, related to an "XML Signature Element Wrapping" or a "SOAP signature replay" issue.  
Phase
Assigned (20110201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
528917 48642 CVE-2011-0730 CONFIRM:http://launchpadlibrarian.net/72472626/eucalyptus_2.0.1%2Bbzr1256-0ubuntu5_2.0.1%2Bbzr1256-0ubuntu6.diff.gz  View
528918 48642 CVE-2011-0730 CONFIRM:http://open.eucalyptus.com/wiki/esa-02  View
528919 48642 CVE-2011-0730 CONFIRM:https://bugs.launchpad.net/bugs/746101  View
528920 48642 CVE-2011-0730 CONFIRM:https://launchpad.net/ubuntu/+source/eucalyptus/+changelog  View
528921 48642 CVE-2011-0730 UBUNTU:USN-1137-1  View
528922 48642 CVE-2011-0730 URL:http://www.ubuntu.com/usn/USN-1137-1  View
528923 48642 CVE-2011-0730 BID:48000  View
528924 48642 CVE-2011-0730 URL:http://www.securityfocus.com/bid/48000  View
528925 48642 CVE-2011-0730 SECUNIA:44705  View
528926 48642 CVE-2011-0730 URL:http://secunia.com/advisories/44705  View
528927 48642 CVE-2011-0730 XF:eucalyptus-soap-command-execution(67670)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33987 JVNDB-2011-004229 Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性 Adobe ColdFusion には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-0735 48642 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004229.html  View