Eucalyptus Walrus REST Interface Key Verification Authentication Bypass (ESA-03)

NASLDB: Eucalyptus Walrus REST Interface Key Verification Authentication Bypass (ESA-03)

General

ID: 61611
Name: Eucalyptus Walrus REST Interface Key Verification Authentication Bypass (ESA-03)

Summary: Attempts to access a non-existent bucket with an unauthorized key

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS Temporal Vector: CVSS2#E:F/RL:U/RC:C

Port: 8773
Family: CGI abuses
Type: Remote

Description

The version of Eucalyptus Walrus hosted on the remote web server
contains a flaw in the ‘WalrusComponentLoginModule’ class’s
‘authenticate’ method that allows a remote, unauthenticated attacker to
create, read, and write to buckets as an administrator.

When an affected Walrus instance receives a REST request, it processes
that request in the context of an administrative user and verifies that
the RSA signature in the ‘EucaSignature’ header matches the public key
from the X.509 certificate in the ‘EucaCert’ header. The issue is that
while the correlation between the certificate and the signature is
checked, no effort is made to ensure that the certificate is recognized
as trusted.