Test ID:	1.3.6.1.4.1.25623.1.0.842031
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-2407-1)
Summary:	The remote host is missing an update for the 'nova' package(s) announced via the USN-2407-1 advisory.
Description:	Summary: The remote host is missing an update for the 'nova' package(s) announced via the USN-2407-1 advisory. Vulnerability Insight: Garth Mollett discovered that OpenStack Nova did not properly clean up an instance when using rescue mode with the VMWare driver. A remove authenticated user could exploit this to bypass intended quota limits. By default, Ubuntu does not use the VMWare driver. (CVE-2014-3608) Amrith Kumar discovered that OpenStack Nova did not properly sanitize log message contents. Under certain circumstances, a local attacker with read access to Nova log files could obtain access to sensitive information. (CVE-2014-7230) Affected Software/OS: 'nova' package(s) on Ubuntu 14.04. Solution: Please install the updated package(s). CVSS Score: 2.7 CVSS Vector: AV:A/AC:L/Au:S/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-3608 70220 http://www.securityfocus.com/bid/70220 RHSA-2014:1781 http://rhn.redhat.com/errata/RHSA-2014-1781.html RHSA-2014:1782 http://rhn.redhat.com/errata/RHSA-2014-1782.html [oss-security] 20141002 [OSSA 2014-032] Nova VMware driver still leaks rescued images (CVE-2014-3608) http://seclists.org/oss-sec/2014/q4/65 https://bugs.launchpad.net/nova/+bug/1338830 Common Vulnerability Exposure (CVE) ID: CVE-2014-7230 BugTraq ID: 70185 http://www.securityfocus.com/bid/70185 http://seclists.org/oss-sec/2014/q3/853 RedHat Security Advisories: RHSA-2014:1939 http://rhn.redhat.com/errata/RHSA-2014-1939.html http://www.ubuntu.com/usn/USN-2405-1 XForce ISS Database: openstack-cinder-cve20147230-info-disc(96725) https://exchange.xforce.ibmcloud.com/vulnerabilities/96725
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.