CVE-2012-0948

Published: Jun 7, 2012Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

DistUpgrade/DistUpgradeMain.py in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uses weak permissions for (1) apt-clone_system_state.tar.gz and (2) system_state.tar.gz, which allows local users to obtain repository credentials.

Affected (6)

Products: Canonical: Ubuntu Linux · Gnome: Update Manager Core

1 product

1 product

Update Manager Core

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 11.04
Canonical Ubuntu Linux	Version 11.10
Canonical Ubuntu Linux	Version 12.04
Gnome Update Manager Core	Version 0.150.5.2
Gnome Update Manager Core	Version 0.152.25.10
Gnome Update Manager Core	Version 0.156.14.3

Related CWEs

References (12)

http://launchpadlibrarian.net/105380733/update-manager_1%3A0.156.14.3_1%3A0.156.14.4.diff.gz

Source: security@ubuntu.com

http://osvdb.org/82019

Source: security@ubuntu.com

http://secunia.com/advisories/49230

Source: security@ubuntu.com

Vendor Advisory

http://www.securityfocus.com/bid/53604

Source: security@ubuntu.com

http://www.ubuntu.com/usn/USN-1443-1

Source: security@ubuntu.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/75727

Source: security@ubuntu.com

http://launchpadlibrarian.net/105380733/update-manager_1%3A0.156.14.3_1%3A0.156.14.4.diff.gz

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/82019

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/49230

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/53604

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1443-1

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/75727

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.