NVD

Id
10983  
Name
CVE-2011-4596  
Description
Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) manifest.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-12-23  
Modified Date
2011-12-26  
Seq
2011-4596  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
61274 10983 CVE-2011-4596 https://bugs.launchpad.net/nova/+bug/885167  View
61275 10983 CVE-2011-4596 https://bugs.launchpad.net/nova/+bug/894755  View
61276 10983 CVE-2011-4596 https://github.com/openstack/nova/commit/76363226bd8533256f7795bba358d7f4b8a6c9e6  View
61277 10983 CVE-2011-4596 https://github.com/openstack/nova/commit/ad3241929ea00569c74505ed002208ce360c667e  View
61278 10983 CVE-2011-4596 [openstack] 20111213 [OSSA 2011-001] Path traversal issues registering malicious images using EC2 API (CVE-2011-4596)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33282 JVNDB-2011-003522 OpenStack Compute (Nova) におけるディレクトリトラバーサルの脆弱性 OpenStack Compute (Nova) には、EC2 API および S3/RegisterImage メソッドが有効であるとき、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2011-4596 52503 CVE-2011-4596 10983 6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003522.html 2011-12-23 2011-12-28 View