Apache Libcloud Digital Ocean API - Local Information Disclosure

Author: anonymous
type: local
platform: linux
port: 0
date_added: 2014-01-01
date_updated: 2015-12-12
verified: 1
codes: CVE-2013-6480;OSVDB-102434
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/64617/info

Apache Libcloud is prone to a local information-disclosure vulnerability.

Local attackers can exploit this issue to obtain sensitive information. Information obtained may lead to further attacks.

Apache Libcloud versions 0.12.3 through 0.13.2 are vulnerable.

dd if=/dev/vda bs=1M | strings -n 100 > out.txt
↑