PT-2013-2855 · Canonical · Apport

Martin Carpenter · Publicado 2013-10-25 · Atualizado 2013-10-28 · CVE-2013-1067

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apport versions 2.12.5 and earlier

Description The issue allows local users to obtain sensitive information by reading core dump files created by setuid binaries due to weak permissions.

Recommendations For Apport versions 2.12.5 and earlier, update to a version later than 2.12.5 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-1067

Produtos afetados

Apport

Referências · 2

• http://ubuntu.com/usn/USN-2007-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-1067 · Nota de Segurança