Lucene search

K
cve[email protected]CVE-2011-0724
HistoryFeb 19, 2011 - 1:00 a.m.

CVE-2011-0724

2011-02-1901:00:03
CWE-310
web.nvd.nist.gov
29
cve-2011-0724
live dvd
edubuntu
italc
remote attackers
privileges

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.2%

The Live DVD for Edubuntu 9.10, 10.04 LTS, and 10.10 does not correctly regenerate iTALC private keys after installation, which causes each installation to have the same fixed key, which allows remote attackers to gain privileges.

Affected configurations

NVD
Node
ubuntuedubuntuMatch9.10
OR
ubuntuedubuntuMatch10.04lts
OR
ubuntuedubuntuMatch10.10
AND
ubuntulive_dvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.2%