NVD

Id
45798  
Name
CVE-2012-4406  
Description
OpenStack Object Storage (swift) before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-10-22  
Modified Date
2013-04-10  
Seq
2012-4406  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
229849 45798 CVE-2012-4406 FEDORA-2012-15098  View
229850 45798 CVE-2012-4406 RHSA-2012:1379  View
229851 45798 CVE-2012-4406 RHSA-2013:0691  View
229852 45798 CVE-2012-4406 [oss-security] 20120905 Re: CVE-Request: openstack pickle de-serialization  View
229853 45798 CVE-2012-4406 [oss-security] 20120905 CVE-Request: openstack pickle de-serialization  View
229854 45798 CVE-2012-4406 55420  View
229855 45798 CVE-2012-4406 openstack-swift-loads-code-exec(79140)  View
229856 45798 CVE-2012-4406 https://bugs.launchpad.net/swift/+bug/1006414  View
229857 45798 CVE-2012-4406 https://bugzilla.redhat.com/show_bug.cgi?id=854757  View
229858 45798 CVE-2012-4406 https://github.com/openstack/swift/commit/e1ff51c04554d51616d2845f92ab726cb0e5831a  View
229859 45798 CVE-2012-4406 https://launchpad.net/swift/+milestone/1.7.0  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29379 JVNDB-2012-005086 OpenStack Object Storage (swift) における任意のコードを実行される脆弱性 OpenStack Object Storage (swift) は、memcached 内のメタデータを保存およびロードする際、安全でない pickle Python モジュールの loads 関数を使用するため、任意のコードを実行される脆弱性が存在します。 CVE-2012-4406 57644 CVE-2012-4406 45798 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005086.html 2012-09-13 2012-10-24 View