CVE-2011-0730 | BDVDB-2026-46250 Detail
Description#
Eucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC) and other products, do not properly interpret signed elements in SOAP requests, which allows man-in-the-middle attackers to execute arbitrary commands by modifying a request, related to an "XML Signature Element Wrapping" or a "SOAP signature replay" issue.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://open.eucalyptus.com/wiki/esa-02
- http://secunia.com/advisories/44705
- http://launchpadlibrarian.net/72472626/eucalyptus_2.0.1%2Bbzr1256-0ubuntu5_2.0.1%2Bbzr1256-0ubuntu6.diff.gz
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67670
- http://www.ubuntu.com/usn/USN-1137-1
- https://bugs.launchpad.net/bugs/746101
- http://www.securityfocus.com/bid/48000
- https://launchpad.net/ubuntu/+source/eucalyptus/+changelog
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.