CVE-2011-4596

Publication date 13 December 2011

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) manifest.

Status

Package Ubuntu Release Status
nova 11.10 oneiric
Fixed 2011.3-0ubuntu6.3
11.04 natty
Fixed 2011.2-0ubuntu1.2
10.10 maverick
Not affected
10.04 LTS lucid Not in release
8.04 LTS hardy Not in release

References

Related Ubuntu Security Notices (USN)

Other references