CVE-2011-0724

The Live DVD for Edubuntu 9.10, 10.04 LTS, and 10.10 does not correctly regenerate iTALC private keys after installation, which causes each installation to have the same fixed key, which allows remote attackers to gain privileges.
Severity
UNKNOWN
AV:N/AC:M/Au:N/C:C/I:C/A:C
Atk. Vector
NETWORK
Atk. Complexity
MEDIUM
Base Score
CVSS 3.x
EPSS Score
Percentile: 68%
VendorProductVersion
ubuntuedubuntu
9.10
ubuntuedubuntu
10.04
ubuntuedubuntu
10.10
ubuntulive_dvd
*
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
italc
maverick
Fixed 1:1.0.9.1-0ubuntu18.10.10.1
released
lucid
Fixed 1:1.0.9.1-0ubuntu18.10.04.1
released
karmic
Fixed 1:1.0.9.1-0ubuntu16.1
released
hardy
not-affected
dapper
not-affected
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/46346
http://www.ubuntu.com/usn/USN-1061-1
http://www.vupen.com/english/advisories/2011/0378
https://exchange.xforce.ibmcloud.com/vulnerabilities/65389
http://www.securityfocus.com/bid/46346
http://www.ubuntu.com/usn/USN-1061-1
http://www.vupen.com/english/advisories/2011/0378
https://exchange.xforce.ibmcloud.com/vulnerabilities/65389