CVE-2013-6398

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The virtual router in Apache CloudStack before 4.2.1 does not preserve the source restrictions in firewall rules after being restarted, which allows remote attackers to bypass intended restrictions via a request.

Weaknesses (CWE)

CWE-264

Affected Products (35)

apache · cloudstackvulnerable

References (14)

http://secunia.com/advisories/55960

Vendor Advisory

http://secunia.com/advisories/60284

http://support.citrix.com/article/CTX140989

http://www.securityfocus.com/bid/69432

http://www.securitytracker.com/id/1030762

https://blogs.apache.org/cloudstack/entry/cve_2013_6398_cloudstack_virtual

Vendor Advisory

https://issues.apache.org/jira/browse/CLOUDSTACK-5263

http://secunia.com/advisories/55960

Vendor Advisory

http://secunia.com/advisories/60284

http://support.citrix.com/article/CTX140989

http://www.securityfocus.com/bid/69432

http://www.securitytracker.com/id/1030762

https://blogs.apache.org/cloudstack/entry/cve_2013_6398_cloudstack_virtual

Vendor Advisory

https://issues.apache.org/jira/browse/CLOUDSTACK-5263