{"id":"CVE-2011-4596","aliases":["DEBIAN-CVE-2011-4596","EUVD-2022-5020","GHSA-qr62-r9xc-r2gj","PYSEC-2026-881"],"status":"published","title":"OpenStack Nova Multiple directory traversal vulnerabilities","description":"Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) manifest.","severity":{"version":"2.0","score":6,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01761,"percentile":0.78164,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-22"],"published":"2011-12-23T22:00:00Z","modified":"2026-10-23T17:47:21Z","fixes":[{"ecosystem":"PyPI","package":"nova","fixed_in":["12.0.0a0"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"nova","fixed_in":["2012.1~e1-4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"nova","fixed_in":["2012.1~e1-4"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"nova","fixed_in":["2012.1~e1-4"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0a0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2012.1~e1-4"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2012.1~e1-4"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2012.1~e1-4"}]}]},{"source":"osv","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0a0"}]}]},{"source":"osv","ecosystem":"PyPI","package":"nova","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0.0a0"}]}]}],"products":[{"vendor":"openstack","product":"nova"}],"references":[{"url":"https://github.com/openstack/nova/commit/ad3241929ea00569c74505ed002208ce360c667e","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://bugs.launchpad.net/nova/+bug/894755","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://lists.launchpad.net/openstack/msg06105.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://github.com/openstack/nova/commit/76363226bd8533256f7795bba358d7f4b8a6c9e6","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://bugs.launchpad.net/nova/+bug/885167","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-4596","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-qr62-r9xc-r2gj","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2011-4596","tags":["advisory"]},{"url":"https://github.com/openstack/nova","tags":["package"]},{"url":"https://pypi.org/project/nova","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2011-4596","description":"Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) manifest.","status":"published","published":"2011-12-23T22:00:00Z","modified":"2024-08-07T00:09:19.335Z","updated_at":"2026-11-02T14:35:37.989579Z"}],"euvd":[{"id":"EUVD-2022-5020","description":"Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) manifest.","status":"published","published":"2011-12-23T22:00:00Z","modified":"2024-08-07T00:09:19Z","updated_at":"2026-11-03T01:39:48.540824Z"}],"ghsa":[{"id":"GHSA-qr62-r9xc-r2gj","title":"OpenStack Nova Multiple directory traversal vulnerabilities","description":"Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) manifest.","status":"published","published":"2022-05-14T01:58:50Z","modified":"2024-05-14T21:13:52Z","cwes":["CWE-22"],"updated_at":"2026-11-02T14:37:48.848211Z"}],"nvd":[{"id":"CVE-2011-4596","description":"Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) manifest.","status":"published","published":"2011-12-23T22:55:00.99Z","modified":"2026-06-16T23:35:06.757Z","cvss":[{"version":"2.0","score":6,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:02:11.800512Z"}],"osv":[{"id":"CVE-2011-4596","description":"Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) manifest.","status":"published","published":"2011-12-23T22:55:00Z","modified":"2026-07-07T11:56:23.943876478Z","updated_at":"2026-11-02T15:43:58.279353Z"},{"id":"DEBIAN-CVE-2011-4596","description":"Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) manifest.","status":"published","published":"2011-12-23T22:55:00.99Z","modified":"2026-10-23T17:47:21.46747242Z","updated_at":"2026-11-02T15:45:24.612044Z"},{"id":"GHSA-qr62-r9xc-r2gj","title":"OpenStack Nova Multiple directory traversal vulnerabilities","description":"Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) manifest.","status":"published","published":"2022-05-14T01:58:50Z","modified":"2026-07-07T11:56:23.943876478Z","cwes":["CWE-22"],"updated_at":"2026-11-02T15:46:54.760124Z"},{"id":"PYSEC-2026-881","title":"OpenStack Nova Multiple directory traversal vulnerabilities","description":"Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) manifest.","status":"published","published":"2026-07-06T08:03:23.012308Z","modified":"2026-07-07T11:45:49.186404659Z","updated_at":"2026-11-02T15:52:58.117212Z"}]}}