CVE-2011-0730

Eucalyptus before 2.0.3 and Eucalyptus EE before 2.0.2, as used in Ubuntu Enterprise Cloud (UEC) and other products, do not properly interpret signed elements in SOAP requests, which allows man-in-the-middle attackers to execute arbitrary commands by modifying a request, related to an "XML Signature Element Wrapping" or a "SOAP signature replay" issue.

• CWE-20

• http://launchpadlibrarian.net/72472626/eucalyptus_2.0.1%2Bbzr1256-0ubuntu5_2.0.1%2Bbzr1256-0ubuntu6.diff.gzPatch, Third Party Advisory
• http://open.eucalyptus.com/wiki/esa-02Vendor Advisory
• http://secunia.com/advisories/44705Third Party Advisory
• http://www.securityfocus.com/bid/48000Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1137-1Third Party Advisory
• https://bugs.launchpad.net/bugs/746101Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67670Third Party Advisory, VDB Entry
• https://launchpad.net/ubuntu/+source/eucalyptus/+changelogPatch, Third Party Advisory
• http://launchpadlibrarian.net/72472626/eucalyptus_2.0.1%2Bbzr1256-0ubuntu5_2.0.1%2Bbzr1256-0ubuntu6.diff.gzPatch, Third Party Advisory
• http://open.eucalyptus.com/wiki/esa-02Vendor Advisory
• http://secunia.com/advisories/44705Third Party Advisory
• http://www.securityfocus.com/bid/48000Third Party Advisory, VDB Entry
• http://www.ubuntu.com/usn/USN-1137-1Third Party Advisory
• https://bugs.launchpad.net/bugs/746101Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67670Third Party Advisory, VDB Entry
• https://launchpad.net/ubuntu/+source/eucalyptus/+changelogPatch, Third Party Advisory

Published

Jun 2, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-0724The Live DVD for Edubuntu 9.10, 10.04 LTS, and 10.10 does no…
• CVE-2011-0725Absolute path traversal vulnerability in the org.debian.apt.…
• CVE-2011-0726The do_task_stat function in fs/proc/array.c in the Linux ke…
• CVE-2011-0727GNOME Display Manager (gdm) 2.x before 2.32.1 allows local u…
• CVE-2011-0728Cross-site scripting (XSS) vulnerability in templatefunction…
• CVE-2011-0729dbus_backend/ls-dbus-backend in the D-Bus backend in languag…
• CVE-2011-0731Buffer overflow in the DB2 Administration Server (DAS) compo…
• CVE-2011-0732Multiple unspecified vulnerabilities in IBM Tivoli Integrate…
• CVE-2011-0733Cross-site scripting (XSS) vulnerability in Adobe ColdFusion…
• CVE-2011-0734Cross-site scripting (XSS) vulnerability in Adobe ColdFusion…
• CVE-2011-0735Cross-site scripting (XSS) vulnerability in Adobe ColdFusion…
• CVE-2011-0736Adobe ColdFusion 9.0.1 CHF1 and earlier, when a web applicat…5.3