Test ID:	1.3.6.1.4.1.25623.1.0.841599
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-2005-1)
Summary:	The remote host is missing an update for the 'cinder' package(s) announced via the USN-2005-1 advisory.
Description:	Summary: The remote host is missing an update for the 'cinder' package(s) announced via the USN-2005-1 advisory. Vulnerability Insight: Rongze Zhu discovered that the Cinder LVM driver did not zero out data when deleting snapshots. This could expose sensitive information to authenticated users when subsequent servers use the volume. (CVE-2013-4183) Grant Murphy discovered that Cinder would allow XML entity processing. A remote unauthenticated attacker could exploit this using the Cinder API to cause a denial of service via resource exhaustion. (CVE-2013-4179, CVE-2013-4202) Affected Software/OS: 'cinder' package(s) on Ubuntu 13.04. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4179 RHSA-2013:1199 http://rhn.redhat.com/errata/RHSA-2013-1199.html USN-2005-1 http://www.ubuntu.com/usn/USN-2005-1 https://bugs.launchpad.net/ossa/+bug/1190229 Common Vulnerability Exposure (CVE) ID: CVE-2013-4183 RHSA-2013:1198 http://rhn.redhat.com/errata/RHSA-2013-1198.html https://bugs.launchpad.net/cinder/+bug/1198185 Common Vulnerability Exposure (CVE) ID: CVE-2013-4202
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.