NVD

Id
44957  
Name
CVE-2012-3360  
Description
Directory traversal vulnerability in virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2) and Essex (2012.1), when used over libvirt-based hypervisors, allows remote authenticated users to write arbitrary files to the disk image via a .. (dot dot) in the path attribute of a file element.  
Reject
 
CVSS Version
2  
CVSS Score
5.5  
Severity
Medium  
CVSS Base Score
5.5  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-07-22  
Modified Date
2012-08-16  
Seq
2012-3360  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225238 44957 CVE-2012-3360 FEDORA-2012-10420  View
225239 44957 CVE-2012-3360 54277  View
225240 44957 CVE-2012-3360 USN-1497-1  View
225241 44957 CVE-2012-3360 https://bugs.launchpad.net/nova/+bug/1015531  View
225242 44957 CVE-2012-3360 https://github.com/openstack/nova/commit/2427d4a99bed35baefd8f17ba422cb7aae8dcca7  View
225243 44957 CVE-2012-3360 https://github.com/openstack/nova/commit/b0feaffdb2b1c51182b8dce41b367f3449af5dd9  View
225244 44957 CVE-2012-3360 [openstack] 20120603 [OSSA 2012-008] Arbitrary file injection/corruption through directory traversal issues (CVE-2012-3360, CVE-2012-3361)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27562 JVNDB-2012-003269 OpenStack Compute (Nova) Folsom および Essex におけるディレクトリトラバーサルの脆弱性 OpenStack Compute (Nova) Folsom (2012.2) および Essex (2012.1) の virt/disk/api.py には、libvirt ベースのハイパーバイザー上で使用される場合、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2012-3360 56598 CVE-2012-3360 44957 5.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003269.html 2012-06-20 2012-09-04 View