CVE:CVE-2013-0335
CNNVD:CNNVD-201302-589
OpenStack Compute（Nova）是用Python编写的云计算构造控制器，属于laaS系统的一部分。
OpenStack Compute (Nova) Grizzly，Folsom (2012.2)，Essex (2012.1)中存在漏洞。通过对删除绑定相同VNC端口的VM使用VNC令牌，远程认证攻击者利用该漏洞在伺机情况下获得访问到VM的权限。
solution:Upgrade openstack essex to a higher version than 2012.1,and avoid the version 2012.1; Upgrade openstack folsom to a higher version than 2012.2,and avoid the version 2012.2; Upgrade openstack grizzly to a higher version than 2012.2,and avoid the version 2012.2; Upgrade canonical ubuntu_linux to a higher version than 11.10,12.04,12.10,and avoid the version 11.10,12.04,12.10