Eucalyptus CVE-2013-4767 Remote Command Injection Vulnerability

Bugtraq ID:	62927
Class:	Input Validation Error
CVE:	CVE-2013-4767
Remote:	Yes
Local:	No
Published:	Oct 02 2013 12:00AM
Updated:	Mar 19 2015 09:27AM
Credit:	The vendor reported this issue.
Vulnerable:	Eucalyptus Systems Eucalyptus 2.0.3 Eucalyptus Systems Eucalyptus 2.0.2 Eucalyptus Systems Eucalyptus 2.0.1 Eucalyptus Systems Eucalyptus 2.0.0 Eucalyptus Systems Eucalyptus 1.6.2
Not Vulnerable:

Eucalyptus CVE-2013-4767 Remote Command Injection Vulnerability

Eucalyptus is prone to a remote command-injection vulnerability.

Exploiting this issue could allow an attacker to execute arbitrary commands with root privileges. Successful exploits will result in the complete compromise of the Node Controller and potentially allow access to data on EBS and Walrus.

Versions prior to Eucalyptus 3.3.2 are vulnerable.

Eucalyptus CVE-2013-4767 Remote Command Injection Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Eucalyptus CVE-2013-4767 Remote Command Injection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Eucalyptus CVE-2013-4767 Remote Command Injection Vulnerability

References:

• Eucalyptus Homepage (Eucalyptus Systems)