What’s Vulnerable › Vulnerabilities

CVE-2011-0730

• Severity: medium (CVSS 6.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-06-02 · updated 2026-06-16
• Weakness: CWE-20

Description

Eucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC) and other products, do not properly interpret signed elements in SOAP requests, which allows man-in-the-middle attackers to execute arbitrary commands by modifying a request, related to an "XML Signature Element Wrapping" or a "SOAP signature replay" issue.

Affected products

• Canonical Ubuntu Linux: 10.04, 10.10, 11.04
• Hewlett Packard Enterprise Helion Eucalyptus: before 2.0.2; before 2.0.3 — fixed in 2.0.2, 2.0.3

How to fix

Upgrade to a fixed version: Hewlett Packard Enterprise Helion Eucalyptus 2.0.2, 2.0.3. Check the vendor advisory for mitigations.

References

• http://launchpadlibrarian.net/72472626/eucalyptus_2.0.1%2Bbzr1256-0ubuntu5_2.0.1%2Bbzr1256-0ubuntu6.diff.gz
• http://open.eucalyptus.com/wiki/esa-02
• http://secunia.com/advisories/44705
• http://www.securityfocus.com/bid/48000
• http://www.ubuntu.com/usn/USN-1137-1
• https://bugs.launchpad.net/bugs/746101
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67670
• https://launchpad.net/ubuntu/+source/eucalyptus/+changelog
• http://launchpadlibrarian.net/72472626/eucalyptus_2.0.1%2Bbzr1256-0ubuntu5_2.0.1%2Bbzr1256-0ubuntu6.diff.gz
• http://open.eucalyptus.com/wiki/esa-02
• http://secunia.com/advisories/44705
• http://www.securityfocus.com/bid/48000

Get alerted when CVE-2011-0730 or the next vulnerability affects your stack