PT-2013-6310 · Openstack · Openstack Nova

Published 2013-12-27 · Updated 2013-12-27

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions OpenStack Nova versions Folsom through Havana

Description The issue is related to the insecure use of a temporary directory for storing signing certificates in the keystone/middleware/auth token.py module. This allows local users to potentially spoof servers by pre-creating the directory, which is then reused by Nova. An example of this exploit is demonstrated on Fedora using the /tmp/keystone-signing-nova directory.

Recommendations For OpenStack Nova versions Folsom through Havana, consider restricting access to the temporary directory used for storing signing certificates to prevent local users from spoofing servers. As a temporary workaround, restrict access to the /tmp/keystone-signing-nova directory to minimize the risk of exploitation.

Related Identifiers

PYSEC-2013-45

Affected Products

Openstack Nova

References · 6

• https://osv.dev/vulnerability/PYSEC-2013-45 · Vendor Advisory
• https://bugs.launchpad.net/nova/+bug/1174608 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=958285 · Note
• http://lists.openstack.org/pipermail/openstack-announce/2013-May/000098.html · Note
• http://openwall.com/lists/oss-security/2013/05/09/2 · Note
• http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105916.html · Note