CVE-2013-0335

HighCVSS 7.6/10Last modified Jul 31, 2026

Description

OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) allows remote authenticated users to gain access to a VM in opportunistic circumstances by using the VNC token for a deleted VM that was bound to the same VNC port.

Metrics

CVSS 3.1 7.6/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L

Weakness enumeration

CWE-613CWE-264

Affected software

VendorProductVersions
Red HatOpenStack Folsom for RHEL 6—
Red HatRed Hat OpenStack Platform 13 (Queens)—
Red HatRed Hat OpenStack Platform 13 (Queens)—
Red HatRed Hat OpenStack Platform 16.2—
Red HatRed Hat OpenStack Platform 16.2—
Red HatRed Hat OpenStack Platform 17.1—
Red HatRed Hat OpenStack Platform 17.1—
Red HatRed Hat OpenStack Platform 18.0—

References

Timeline

Published
Mar 22, 2013
Last modified
Jul 31, 2026
NVD status
Modified

Related CVEs from 2013

CVE-2013-03365.0The ipapwd_chpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c in the directory server (dirsrv) in FreeIPA before 3.2CVE-2013-03377.5The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log fiCVE-2013-03384.3libxml2 2.9.0 and earlier allows context-dependent attackers to cause a denial of service (CPU and memory consumption) via an XML file contaCVE-2013-03396.8libxml2 through 2.9.1 does not properly handle external entities expansion unless an application developer uses the xmlSAX2ResolveEntity or CVE-2013-03406.8expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler funCVE-2013-03424.3The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packeCVE-2013-03433.2The ipv6_create_tempaddr function in net/ipv6/addrconf.c in the Linux kernel through 3.8 does not properly handle problems with the generatiCVE-2013-03452.1varnish 3.0.3 uses world-readable permissions for the /var/log/varnish/ directory and the log files in the directory, which allows local useCVE-2013-03462.1Apache Tomcat 7.x uses world-readable permissions for the log directory and its files, which might allow local users to obtain sensitive infCVE-2013-03477.2The Gentoo init script for webfs uses world-readable permissions for /var/log/webfsd.log, which allows local users to have unspecified impacCVE-2013-03482.1thttpd.c in sthttpd before 2.26.4-r2 and thttpd 2.25b use world-readable permissions for /var/log/thttpd.log, which allows local users to obCVE-2013-03491.9The hidp_setup_hid function in net/bluetooth/hidp/core.c in the Linux kernel before 3.7.6 does not properly copy a certain name field, which