Eucalyptus CVE-2013-4766 Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	62351
Class:	Access Validation Error
CVE:	CVE-2013-4766
Remote:	Yes
Local:	No
Published:	Aug 27 2013 12:00AM
Updated:	Aug 27 2013 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Eucalyptus Eucalyptus 3.2.1 Eucalyptus Eucalyptus 3.2 Eucalyptus Eucalyptus 3.3 Eucalyptus Eucalyptus 3.2.2 Eucalyptus Eucalyptus 3.1.1 Eucalyptus Eucalyptus 3.1.0 Eucalyptus Eucalyptus 3.0.2 Eucalyptus Eucalyptus 3.0.1 Eucalyptus Eucalyptus 2.0.3 Eucalyptus Eucalyptus 2.0.2 Eucalyptus Eucalyptus 2.0.1 Eucalyptus Eucalyptus 2.0.0 Eucalyptus Eucalyptus 1.6.2
Not Vulnerable:	Eucalyptus Eucalyptus 3.3.1

Eucalyptus CVE-2013-4766 Multiple Information Disclosure Vulnerabilities

Eucalyptus is prone to multiple information-disclosure vulnerabilities.

Remote attackers can exploit these issues to gain access to log files that may aid in further attacks.

Versions prior to Eucalyptus 3.3.1 are vulnerable.

Eucalyptus CVE-2013-4766 Multiple Information Disclosure Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Eucalyptus CVE-2013-4766 Multiple Information Disclosure Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Eucalyptus CVE-2013-4766 Multiple Information Disclosure Vulnerabilities

References:

• ESA-13: Unauthorized Access to CC/NC Log Files (Eucalyptus)
  
• Eucalyptus Homepage (Eucalyptus Systems)