CVEvulnerability
CVE-2012-0949
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-05-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The Apport hook in Update Manager as used by Ubuntu 12.04 LTS, 11.10, and 11.04 uploads certain system state archive files when reporting bugs to Launchpad, which allows remote attackers to read repository credentials by viewing a public bug report.
Affected configurations
• canonical ubuntu linux 11.04
• canonical ubuntu linux 11.10
• canonical ubuntu linux 12.04
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://osvdb.org/82020 osvdb.org
- http://secunia.com/advisories/49230 Vendor Advisory
- http://www.securityfocus.com/bid/53605 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1443-1 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75728 exchange.xforce.ibmcloud.com
- http://osvdb.org/82020 osvdb.org
- http://secunia.com/advisories/49230 Vendor Advisory
- http://www.securityfocus.com/bid/53605 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1443-1 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/75728 exchange.xforce.ibmcloud.com