CVE-2012-0948

CVE-2012-0948 affects Ubuntu’s Update Manager (DistUpgrade/DistUpgradeMain.py) used in Ubuntu 12.04 LTS, 11.10, and 11.04. The vulnerability arises from weak permissions on two archive files (apt-clone_system_state.tar.gz and system_state.tar.gz), allowing local users to read repository credentia...