CVEvulnerability
CVE-2013-1067
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-10-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-264
Description
Apport 2.12.5 and earlier uses weak permissions for core dump files created by setuid binaries, which allows local users to obtain sensitive information by reading the file.
Affected configurations
• canonical ubuntu linux 12.04
• canonical ubuntu linux 12.10
• canonical ubuntu linux 13.04
• canonical ubuntu linux 13.10
Related
Weakness · not in database (1)
References
- http://www.ubuntu.com/usn/USN-2007-1 Vendor Advisory
- http://www.ubuntu.com/usn/USN-2007-1 Vendor Advisory