Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Ubuntu 11.10: USN-1326-1 Moderate: Nova Remote Access Issue

ubuntu
Calendar Grey January 11, 2012
Scroller Ubuntu
Debian Security Advisory DSA-1234-1 highlights a kernel flaw that may grant unauthorized control over system processes.
Nova would allow unintended access to resources over the network.

Summary

Nova would allow unintended access to resources over the network.

Software Description:

- nova: OpenStack Compute cloud infrastructure

Details:

Nachi Ueno, Rohit Karajgi, and Venkatesan Ravikumar discovered that when

Nova is configured to use the OpenStack API, it would not correctly enforce

access controls on certain incoming requests. A remote authenticated

attacker could exploit this to change resources of arbitrary tenants.

Topics%20covered

Topics Covered

security advisory security issue access control ubuntu cloud infrastructure nova network resources

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
  nova-api                        2011.3-0ubuntu6.4

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1326-1

CVE-2012-0030

January 11, 2012

Topics%20covered

Topics Covered

security advisory security issue access control ubuntu cloud infrastructure nova network resources

Package Information

https://launchpad.net/ubuntu/+source/nova/2011.3-0ubuntu6.4

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.