CVE-2012-3447

Severity Score

4.9

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an image that uses a symlink that is only readable by root. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3361.

virt/disk/api.py en OpenStack Compute (Nova) v2012.1.x antes de v2012.1.2 y Folsom antes de Folsom-3 permite a usuarios remotos autenticados sobreescribir archivos de su elección mediante un ataque de enlaces simbólicos en una imagen que utiliza un enlace simbólico que es sólo legible por el usuario root. NOTA: esta vulnerabilidad se debe a un arreglo incompleto para CVE-2012-3361.

*Credits: N/A

CVSS Scores

NISTv2 4.9

Attack Vector

Network

Attack Complexity

Medium

Authentication

Single

Confidentiality

None

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2012-06-14 CVE Reserved
2012-08-20 CVE Published
2023-07-11 EPSS Updated
2024-08-06 CVE Updated
2024-08-06 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-264: Permissions, Privileges, and Access Controls

CAPEC

References (8)

URL	Tag	Source
http://www.openwall.com/lists/oss-security/2012/08/07/1	Mailing List
http://www.securityfocus.com/bid/54869	Vdb Entry
https://bugs.launchpad.net/nova/+bug/1031311	X_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=845106	X_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/77539	Vdb Entry
https://review.openstack.org/#/c/10953	X_refsource_confirm

URL	Date	SRC
https://github.com/openstack/nova/commit/ce4b2e27be45a85b310237615c47eb53f37bb5f3	2024-08-06
https://github.com/openstack/nova/commit/d9577ce9f266166a297488445b5b0c93c1ddb368	2024-08-06

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Openstack Search vendor "Openstack"		Folsom Search vendor "Openstack" for product "Folsom"				*		-		Affected
Openstack Search vendor "Openstack"		Nova Search vendor "Openstack" for product "Nova"				2012.1 Search vendor "Openstack" for product "Nova" and version "2012.1"		-		Affected