CVE-2011-0724

2011-02-1000:00:00

ubuntu.com

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.003 Low

EPSS

Percentile

68.2%

JSON

The Live DVD for Edubuntu 9.10, 10.04 LTS, and 10.10 does not correctly
regenerate iTALC private keys after installation, which causes each
installation to have the same fixed key, which allows remote attackers to
gain privileges.

OSVersionArchitecturePackageVersionFilename
ubuntu9.10noarchitalc< 1:1.0.9.1-0ubuntu16.1UNKNOWN
ubuntu10.04noarchitalc< 1:1.0.9.1-0ubuntu18.10.04.1UNKNOWN
ubuntu10.10noarchitalc< 1:1.0.9.1-0ubuntu18.10.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	9.10	noarch	italc	< 1:1.0.9.1-0ubuntu16.1	UNKNOWN
ubuntu	10.04	noarch	italc	< 1:1.0.9.1-0ubuntu18.10.04.1	UNKNOWN
ubuntu	10.10	noarch	italc	< 1:1.0.9.1-0ubuntu18.10.10.1	UNKNOWN