CVE-2011-0724

2011-02-1901:00:03

CWE-310

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

Low

EPSS

0.003

Percentile

68.1%

JSON

The Live DVD for Edubuntu 9.10, 10.04 LTS, and 10.10 does not correctly regenerate iTALC private keys after installation, which causes each installation to have the same fixed key, which allows remote attackers to gain privileges.

Affected configurations

Nvd

Node

ubuntuedubuntuMatch9.10

ubuntuedubuntuMatch10.04lts

ubuntuedubuntuMatch10.10

AND

ubuntulive_dvd

VendorProductVersionCPE
ubuntuedubuntu9.10cpe:2.3:o:ubuntu:edubuntu:9.10:*:*:*:*:*:*:*
ubuntuedubuntu10.04cpe:2.3:o:ubuntu:edubuntu:10.04:*:lts:*:*:*:*:*
ubuntuedubuntu10.10cpe:2.3:o:ubuntu:edubuntu:10.10:*:*:*:*:*:*:*
ubuntulive_dvd*cpe:2.3:h:ubuntu:live_dvd:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ubuntu	edubuntu	9.10	cpe:2.3:o:ubuntu:edubuntu:9.10:::::::*
ubuntu	edubuntu	10.04	cpe:2.3:o:ubuntu:edubuntu:10.04::lts:::::
ubuntu	edubuntu	10.10	cpe:2.3:o:ubuntu:edubuntu:10.10:::::::*
ubuntu	live_dvd	*	cpe:2.3:h:ubuntu:live_dvd::::::::