Vulnerability CVE-2011-0724


Published: 2011-02-18   Modified: 2012-02-13

Description:
The Live DVD for Edubuntu 9.10, 10.04 LTS, and 10.10 does not correctly regenerate iTALC private keys after installation, which causes each installation to have the same fixed key, which allows remote attackers to gain privileges.

Type:

CWE-310

(Cryptographic Issues)

CVSS2 => (AV:N/AC:M/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
9.3/10
10/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Ubuntu -> Live dvd 
Ubuntu -> Edubuntu 

 References:
http://xforce.iss.net/xforce/xfdb/65389
http://www.vupen.com/english/advisories/2011/0378
http://www.ubuntu.com/usn/USN-1061-1
http://www.securityfocus.com/bid/46346

Copyright 2022, cxsecurity.com

 

Back to Top