Staging Environment: Content and features may be unstable or change without notice.
Advisory details: pysec / PYSEC-2012-39
Advisory ID pysec/PYSEC-2012-39
Aliases CVE-2012-3361
GHSA-cm54-3vvf-f5p8
Summary virt/disk/api.py in OpenStack Compute (Nova) Folsom (2012.2), Essex (2012.1), and Diablo (2011.3) allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (0)
There are no known CWE.
System Score Found at
There are no known severity scores.
Reference id Reference type URL
http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083969.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083984.html
https://bugs.launchpad.net/nova/+bug/1015531
http://secunia.com/advisories/49763
http://secunia.com/advisories/49802
https://github.com/openstack/nova/commit/2427d4a99bed35baefd8f17ba422cb7aae8dcca7
https://github.com/openstack/nova/commit/b0feaffdb2b1c51182b8dce41b367f3449af5dd9
https://lists.launchpad.net/openstack/msg14089.html
https://review.openstack.org/#/c/9268/
http://www.securityfocus.com/bid/54278
http://www.ubuntu.com/usn/USN-1497-1
GHSA-cm54-3vvf-f5p8 https://github.com/advisories/GHSA-cm54-3vvf-f5p8

No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.

There are no known vectors.

There are no SSVC decisions available.