CVE-2012-1585 - OpenStack Compute (Nova) Essex before 2011.3 allows remote authenticated users to cause a denial of

CVE-2012-1585

Summary

OpenStack Compute (Nova) Essex before 2011.3 allows remote authenticated users to cause a denial of service (Nova-API log file and disk consumption) via a long server name.

References

Vulnerable Configurations

cpe:2.3:a:openstack:nova:2011.1:*:*:*:*:*:*:*
cpe:2.3:a:openstack:nova:2011.1:*:*:*:*:*:*:*
cpe:2.3:a:openstack:nova:2011.1:rc1:*:*:*:*:*:*
cpe:2.3:a:openstack:nova:2011.1:rc1:*:*:*:*:*:*
cpe:2.3:a:openstack:nova:2011.2:*:*:*:*:*:*:*
cpe:2.3:a:openstack:nova:2011.2:*:*:*:*:*:*:*
cpe:2.3:a:openstack:nova:2011.2:rc1:*:*:*:*:*:*
cpe:2.3:a:openstack:nova:2011.2:rc1:*:*:*:*:*:*

CVSS

Base:	4.0 (as of 14-11-2018 - 18:35)
Impact:
Exploitability:

CWE

CWE-399

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:S/C:N/I:N/A:P

refmap via4

fedora	FEDORA-2012-5026
misc	https://bugs.launchpad.net/nova/+bug/962515
mlist	[Openstack] 20120329 [OSSA 2012-003] Long server names grow nova-api log files significantly (CVE-2012-1585)

Last major update

14-11-2018 - 18:35

Published

17-08-2012 - 00:55

Last modified

14-11-2018 - 18:35