CVE-2012-3447
Priority
Medium
Description
virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x before 2012.1.2 and
Folsom before Folsom-3 allows remote authenticated users to overwrite
arbitrary files via a symlink attack on a file in an image that uses a
symlink that is only readable by root. NOTE: this vulnerability exists
because of an incomplete fix for CVE-2012-3361.
Folsom before Folsom-3 allows remote authenticated users to overwrite
arbitrary files via a symlink attack on a file in an image that uses a
symlink that is only readable by root. NOTE: this vulnerability exists
because of an incomplete fix for CVE-2012-3361.
References
Package
| Upstream: | needs-triage |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 11.04 (Natty Narwhal): | ignored (reached end-of-life) |
| Ubuntu 11.10 (Oneiric Ocelot): | released (2011.3-0ubuntu6.10) |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (2012.1+stable~20120612-3ee026e-0ubuntu1.3) |
| Ubuntu 12.10 (Quantal Quetzal): | not-affected (2012.2~f3-0ubuntu1) |
| Ubuntu 13.04 (Raring Ringtail): | not-affected (2012.2~f3-0ubuntu1) |
Patches: