Test ID:	1.3.6.1.4.1.25623.1.0.71748
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-1413-1 (python-nova)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to python-nova announced via advisory USN-1413-1. Details: Dan Prince discovered that Nova did not properly perform input validation on the length of server names. An authenticated attacker could issue requests using long server names to exhaust the storage resources containing the Nova API log file. Solution: The problem can be corrected by updating your system to the following package versions: Ubuntu 11.10: python-nova 2011.3-0ubuntu6.5 http://www.securityspace.com/smysecure/catid.html?in=USN-1413-1
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-1585 FEDORA-2012-5026 http://lwn.net/Alerts/491298/ [Openstack] 20120329 [OSSA 2012-003] Long server names grow nova-api log files significantly (CVE-2012-1585) http://osdir.com/ml/openstack-cloud-computing/2012-03/msg01133.html https://bugs.launchpad.net/nova/+bug/962515
Copyright	Copyright (c) 2012 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.