CVE Vulnerabilities

CVE-2013-1067

Published: Oct 25, 2013 | Modified: Oct 28, 2013
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.9 MEDIUM
AV:L/AC:L/Au:N/C:C/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Apport 2.12.5 and earlier uses weak permissions for core dump files created by setuid binaries, which allows local users to obtain sensitive information by reading the file.

Affected Software

Name Vendor Start Version End Version
Ubuntu_linux Canonical 12.04 (including) 12.04 (including)
Ubuntu_linux Canonical 12.10 (including) 12.10 (including)
Ubuntu_linux Canonical 13.04 (including) 13.04 (including)
Ubuntu_linux Canonical 13.10 (including) 13.10 (including)

References