APT vulnerability

2012-12-1200:00:00

ubuntu.com

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.1

Confidence

Low

EPSS

Percentile

5.1%

JSON

Releases

Ubuntu 12.10
Ubuntu 12.04
Ubuntu 11.10

Packages

apt - Advanced front-end for dpkg

Details

It was discovered that APT set inappropriate permissions on the term.log
file. A local attacker could use this flaw to possibly obtain sensitive
information.

OSVersionArchitecturePackageVersionFilename
Ubuntu12.10noarchapt< 0.9.7.5ubuntu5.2UNKNOWN
Ubuntu12.10noarchapt-transport-https< 0.9.7.5ubuntu5.2UNKNOWN
Ubuntu12.10noarchapt-utils< 0.9.7.5ubuntu5.2UNKNOWN
Ubuntu12.10noarchlibapt-inst1.5< 0.9.7.5ubuntu5.2UNKNOWN
Ubuntu12.10noarchlibapt-pkg-dev< 0.9.7.5ubuntu5.2UNKNOWN
Ubuntu12.10noarchlibapt-pkg4.12< 0.9.7.5ubuntu5.2UNKNOWN
Ubuntu12.04noarchapt< 0.8.16~exp12ubuntu10.7UNKNOWN
Ubuntu12.04noarchapt-transport-https< 0.8.16~exp12ubuntu10.7UNKNOWN
Ubuntu12.04noarchapt-utils< 0.8.16~exp12ubuntu10.7UNKNOWN
Ubuntu12.04noarchlibapt-inst1.4< 0.8.16~exp12ubuntu10.7UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	12.10	noarch	apt	< 0.9.7.5ubuntu5.2	UNKNOWN
Ubuntu	12.10	noarch	apt-transport-https	< 0.9.7.5ubuntu5.2	UNKNOWN
Ubuntu	12.10	noarch	apt-utils	< 0.9.7.5ubuntu5.2	UNKNOWN
Ubuntu	12.10	noarch	libapt-inst1.5	< 0.9.7.5ubuntu5.2	UNKNOWN
Ubuntu	12.10	noarch	libapt-pkg-dev	< 0.9.7.5ubuntu5.2	UNKNOWN
Ubuntu	12.10	noarch	libapt-pkg4.12	< 0.9.7.5ubuntu5.2	UNKNOWN
Ubuntu	12.04	noarch	apt	< 0.8.16~exp12ubuntu10.7	UNKNOWN
Ubuntu	12.04	noarch	apt-transport-https	< 0.8.16~exp12ubuntu10.7	UNKNOWN
Ubuntu	12.04	noarch	apt-utils	< 0.8.16~exp12ubuntu10.7	UNKNOWN
Ubuntu	12.04	noarch	libapt-inst1.4	< 0.8.16~exp12ubuntu10.7	UNKNOWN