![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
Test ID: | 1.3.6.1.4.1.25623.1.0.71638 |
Category: | Ubuntu Local Security Checks |
Title: | Ubuntu USN-1466-2 (python-nova) |
Summary: | NOSUMMARY |
Description: | Description: The remote host is missing an update to python-nova announced via advisory USN-1466-2. Details: USN 1466-1 fixed a vulnerability in Nova. The upstream patch introduced a regression when a security group granted full access and therefore the network protocol was left unset, causing an error in processing. This update fixes the issue. We apologize for the inconvenience. Original advisory details: It was discovered that, when defining security groups in Nova using the EC2 or OS APIs, specifying the network protocol (e.g. 'TCP') in the incorrect case would cause the security group to not be applied correctly. An attacker could use this to bypass Nova security group restrictions. Solution: The problem can be corrected by updating your system to the following package versions: Ubuntu 11.10: python-nova 2011.3-0ubuntu6.8 http://www.securityspace.com/smysecure/catid.html?in=USN-1466-2 |
Copyright | Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com |
This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |