Security Advisory

CVE-2012-0948

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2012-06-07 21:00:00

Last updated 2024-08-06 18:45:26

Assigner canonical

CVSS score not scored

State PUBLISHED

Description

DistUpgrade/DistUpgradeMain.py in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uses weak permissions for (1) apt-clone_system_state.tar.gz and (2) system_state.tar.gz, which allows local users to obtain repository credentials.

← Browse all CVEs View on cve.org ↗