Vulnerability Database

296,223

Total vulnerabilities in the database

CVE-2012-0948

DistUpgrade/DistUpgradeMain.py in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uses weak permissions for (1) apt-clone_system_state.tar.gz and (2) system_state.tar.gz, which allows local users to obtain repository credentials.

  • Published: Jun 7, 2012
  • Updated: Apr 13, 2023
  • CVE: CVE-2012-0948
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 2.1
  • AV:L/AC:L/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
canonical / ubuntu_linux 11.04 11.04.x
gnome / update-manager-core 0.152.25.10 0.152.25.10.x
gnome / update-manager-core 0.150.5.2 0.150.5.2.x
canonical / ubuntu_linux 11.10 11.10.x
canonical / ubuntu_linux 12.04 12.04.x
gnome / update-manager-core 0.156.14.3 0.156.14.3.x