CVE-2012-0948

EPSS 0.05%
Published 07.06.2012 21:55:02
Last modified 11.04.2025 00:51:21
Source security@ubuntu.com
Teams watchlist Login
Open Login

DistUpgrade/DistUpgradeMain.py in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uses weak permissions for (1) apt-clone_system_state.tar.gz and (2) system_state.tar.gz, which allows local users to obtain repository credentials.

Affected products Warnungen 0 Metrics 2 CWE 0 References 9

Data is provided by the National Vulnerability Database (NVD)

Gnome ≫ Update-manager-core Version0.150.5.2

Gnome ≫ Update-manager-core Version0.152.25.10

Gnome ≫ Update-manager-core Version0.156.14.3

Canonical ≫ Ubuntu Linux Version11.04

Canonical ≫ Ubuntu Linux Version11.10

Canonical ≫ Ubuntu Linux Version12.04 Update- Editionlts

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.05%	0.133

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N

http://secunia.com/advisories/49230

Vendor Advisory

http://www.ubuntu.com/usn/USN-1443-1

Vendor Advisory

http://launchpadlibrarian.net/105380733/update-manager_1%3A0.156.14.3_1%3A0.156.14.4.diff.gz

http://osvdb.org/82019

http://www.securityfocus.com/bid/53604

https://exchange.xforce.ibmcloud.com/vulnerabilities/75727

https://nvd.nist.gov/vuln/detail/CVE-2012-0948

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-0948

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-0948

EUVD