GCVE - cpe:2.3:a:eucalyptus:eucalyptus:2.0.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:eucalyptus:eucalyptus:2.0.2:*:*:*:*:*:*:*

part: a version: 2.0.2 update: *

Vendor	Eucalyptus (`209e9eb7-77d4-5657-ba62-5a3c541b3346`)
Product	Eucalyptus (`c3c50bc9-04dd-57e5-8fad-4735be372cba`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/eucalyptus/eucalyptus`	purl2cpe	2026-06-01 10:13:31.047449

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-4768`	vulnerable	2026-06-08 05:04:49.618914	Details available The web services APIs in Eucalyptus 2.0 through 3.4.1 allow remote attackers to cause a denial of service via vectors related to the "network connection clean up code" and (1) Cloud Controller (CLC), (2) Walrus, (3) Storage Controller (SC), and (4) VMware Broker (VB). Published: 2014-04-15T22:00:00.000Z Updated: 2024-08-06T16:52:27.072Z Open on db.gcve.eu Reference links https://www.eucalyptus.com/resources/security/advisories/esa-15	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4766`	vulnerable	2026-06-08 05:04:49.611448	Details available The gather log service in Eucalyptus before 3.3.1 allows remote attackers to read log files via an unspecified request to the (1) Cluster Controller (CC) or (2) Node Controller (NC) component. Published: 2013-09-17T01:00:00.000Z Updated: 2024-09-16T22:34:57.146Z Open on db.gcve.eu Reference links http://www.eucalyptus.com/resources/security/advisories/esa-13	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-2296`	vulnerable	2026-06-08 05:04:24.395611	Details available Walrus in Eucalyptus before 3.2.2 does not verify authorization for the GetBucketLoggingStatus, SetBucketLoggingStatus, and SetBucketVersioningStatus bucket operations, which allows remote authenticated users to bypass intended restrictions on (1) modifying the logging setting, (2) modifying the versioning setting, or (3) accessing activity logs via a request. Published: 2013-09-17T01:00:00.000Z Updated: 2024-09-17T03:13:29.698Z Open on db.gcve.eu Reference links https://eucalyptus.atlassian.net/browse/EUCA-3074 http://www.eucalyptus.com/resources/security/advisories/esa-10	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4067`	vulnerable	2026-06-08 05:02:15.804166	Details available Walrus in Eucalyptus before 3.2.2 allows remote attackers to cause a denial of service (memory, thread, and CPU consumption) via a crafted XML message containing a DTD, as demonstrated by a bucket-logging request. Published: 2013-09-17T01:00:00.000Z Updated: 2024-09-16T16:58:30.412Z Open on db.gcve.eu Reference links https://eucalyptus.atlassian.net/browse/EUCA-5277 http://www.eucalyptus.com/resources/security/advisories/esa-09	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4066`	vulnerable	2026-06-08 05:02:15.797935	Details available The internal message protocol for Walrus in Eucalyptus 3.2.0 and earlier does not require signatures for unspecified request headers, which allows attackers to (1) delete or (2) upload snapshots. Published: 2013-03-08T18:00:00.000Z Updated: 2024-09-16T17:14:53.673Z Open on db.gcve.eu Reference links http://www.eucalyptus.com/eucalyptus-cloud/security/esa-08	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4065`	vulnerable	2026-06-08 05:02:15.797337	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4064`	vulnerable	2026-06-08 05:02:15.796688	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4063`	vulnerable	2026-06-08 05:02:15.794412	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.