VulnerabilityModified

CVE-2011-0730

Eucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC) and other products, do not properly interpret signed elements in SOAP requests, which allows man-in-the-middle attackers to execute arbitrary commands by…

MEDIUM 6.5EPSS 2.17%

Does this matter?

Lower severity and a low EPSS score (2.17%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
EPSS: 2.17% probability · 81th percentile
CISA KEV: Not listed
Weakness: CWE-20
Affected: eucalyptus/eucalyptus · canonical/ubuntu linux
Source: security@ubuntu.com

References

http://launchpadlibrarian.net/72472626/eucalyptus_2.0.1%2Bbzr1256-0ubuntu5_2.0.1%2Bbzr1256-0ubuntu6.diff.gzPatch, Third Party Advisory
http://open.eucalyptus.com/wiki/esa-02Vendor Advisory
http://secunia.com/advisories/44705Third Party Advisory
http://www.securityfocus.com/bid/48000Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-1137-1Third Party Advisory
https://bugs.launchpad.net/bugs/746101Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/67670Third Party Advisory, VDB Entry
https://launchpad.net/ubuntu/+source/eucalyptus/+changelogPatch, Third Party Advisory
http://launchpadlibrarian.net/72472626/eucalyptus_2.0.1%2Bbzr1256-0ubuntu5_2.0.1%2Bbzr1256-0ubuntu6.diff.gzPatch, Third Party Advisory
http://open.eucalyptus.com/wiki/esa-02Vendor Advisory
http://secunia.com/advisories/44705Third Party Advisory
http://www.securityfocus.com/bid/48000Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-1137-1Third Party Advisory
https://bugs.launchpad.net/bugs/746101Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/67670Third Party Advisory, VDB Entry
https://launchpad.net/ubuntu/+source/eucalyptus/+changelogPatch, Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.