CVEvulnerability
CVE-2011-0730
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-06-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
Eucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC) and other products, do not properly interpret signed elements in SOAP requests, which allows man-in-the-middle attackers to execute arbitrary commands by modifying a request, related to an "XML Signature Element Wrapping" or a "SOAP signature replay" issue.
Affected configurations
• eucalyptus eucalyptus (< 2.0.2)
• eucalyptus eucalyptus (< 2.0.3)
• canonical ubuntu linux 10.04
• canonical ubuntu linux 10.10
• canonical ubuntu linux 11.04
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://launchpadlibrarian.net/72472626/eucalyptus_2.0.1%2Bbzr1256-0ubuntu5_2.0.1%2Bbzr1256-0ubuntu6.diff.gz Patch, Third Party Advisory
- http://open.eucalyptus.com/wiki/esa-02 Vendor Advisory
- http://secunia.com/advisories/44705 Third Party Advisory
- http://www.securityfocus.com/bid/48000 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-1137-1 Third Party Advisory
- https://bugs.launchpad.net/bugs/746101 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67670 Third Party Advisory, VDB Entry
- https://launchpad.net/ubuntu/+source/eucalyptus/+changelog Patch, Third Party Advisory
- http://launchpadlibrarian.net/72472626/eucalyptus_2.0.1%2Bbzr1256-0ubuntu5_2.0.1%2Bbzr1256-0ubuntu6.diff.gz Patch, Third Party Advisory
- http://open.eucalyptus.com/wiki/esa-02 Vendor Advisory
- http://secunia.com/advisories/44705 Third Party Advisory
- http://www.securityfocus.com/bid/48000 Third Party Advisory, VDB Entry
- http://www.ubuntu.com/usn/USN-1137-1 Third Party Advisory
- https://bugs.launchpad.net/bugs/746101 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67670 Third Party Advisory, VDB Entry
- https://launchpad.net/ubuntu/+source/eucalyptus/+changelog Patch, Third Party Advisory