USN-1305-1: Nova vulnerability
13 December 2011
Nova could be made to overwrite files.
- nova - OpenStack Compute cloud infrastructure
David Black discovered that Nova did not properly perform input validation
during image registration. An attacker could exploit this by registering a
crafted image using the EC2 API or S3/RegisterImage method and overwrite
files as the nova user.