usb-creator vulnerability

2011-05-0200:00:00

ubuntu.com

6.1 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

0.0004 Low

EPSS

Percentile

5.2%

JSON

Releases

Ubuntu 11.04
Ubuntu 10.10
Ubuntu 10.04

Packages

usb-creator - Ubuntu startup disk creator transitional meta-package for GTK+

Details

Evan Broder discovered that usb-creator did not properly enforce
restrictions when performing privileged disk operations. A local attacker
could use this flaw to perform certain disk operations, such as unmount
arbitrary mountpoints.

OSVersionArchitecturePackageVersionFilename
Ubuntu11.04noarchusb-creator-common< 0.2.28.3UNKNOWN
Ubuntu11.04noarchusb-creator-gtk< 0.2.28.3UNKNOWN
Ubuntu11.04noarchusb-creator-kde< 0.2.28.3UNKNOWN
Ubuntu10.10noarchusb-creator-common< 0.2.25.3UNKNOWN
Ubuntu10.10noarchusb-creator-gtk< 0.2.25.3UNKNOWN
Ubuntu10.10noarchusb-creator-kde< 0.2.25.3UNKNOWN
Ubuntu10.04noarchusb-creator-common< 0.2.22.3UNKNOWN
Ubuntu10.04noarchusb-creator< 0.2.22.3UNKNOWN
Ubuntu10.04noarchusb-creator-gtk< 0.2.22.3UNKNOWN
Ubuntu10.04noarchusb-creator-kde< 0.2.22.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	11.04	noarch	usb-creator-common	< 0.2.28.3	UNKNOWN
Ubuntu	11.04	noarch	usb-creator-gtk	< 0.2.28.3	UNKNOWN
Ubuntu	11.04	noarch	usb-creator-kde	< 0.2.28.3	UNKNOWN
Ubuntu	10.10	noarch	usb-creator-common	< 0.2.25.3	UNKNOWN
Ubuntu	10.10	noarch	usb-creator-gtk	< 0.2.25.3	UNKNOWN
Ubuntu	10.10	noarch	usb-creator-kde	< 0.2.25.3	UNKNOWN
Ubuntu	10.04	noarch	usb-creator-common	< 0.2.22.3	UNKNOWN
Ubuntu	10.04	noarch	usb-creator	< 0.2.22.3	UNKNOWN
Ubuntu	10.04	noarch	usb-creator-gtk	< 0.2.22.3	UNKNOWN
Ubuntu	10.04	noarch	usb-creator-kde	< 0.2.22.3	UNKNOWN