CVE:CVE-2012-3361
CNNVD:CNNVD-201207-018
OpenStack Compute（Nova）是用Python编写的云计算构造控制器，属于laaS系统的一部分。
OpenStack Compute (Nova) Folsom (2012.2)、Essex (2012.1)和Diablo (2011.3)中的virt/disk/api.py中存在漏洞。远程认证用户可利用该漏洞通过图像文件的符号链接攻击重写任意文件。
solution:Upgrade openstack diablo to a higher version than 2011.3,and avoid the version 2011.3; Upgrade openstack essex to a higher version than 2012.1,and avoid the version 2012.1; Upgrade openstack folsom to a higher version than 2012.2,and avoid the version 2012.2