CVE-2011-0724

EUVD-2011-0738
The Live DVD for Edubuntu 9.10, 10.04 LTS, and 10.10 does not correctly regenerate iTALC private keys after installation, which causes each installation to have the same fixed key, which allows remote attackers to gain privileges.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 78%
Affected Products (NVD)
VendorProductVersion
ubuntuedubuntu
9.10
ubuntuedubuntu
10.04
ubuntuedubuntu
10.10
ubuntulive_dvd
*
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
italc
dapper
not-affected
hardy
not-affected
karmic
Fixed 1:1.0.9.1-0ubuntu16.1
released
lucid
Fixed 1:1.0.9.1-0ubuntu18.10.04.1
released
maverick
Fixed 1:1.0.9.1-0ubuntu18.10.10.1
released
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/46346
http://www.ubuntu.com/usn/USN-1061-1
http://www.vupen.com/english/advisories/2011/0378
https://exchange.xforce.ibmcloud.com/vulnerabilities/65389
http://www.securityfocus.com/bid/46346
http://www.ubuntu.com/usn/USN-1061-1
http://www.vupen.com/english/advisories/2011/0378
https://exchange.xforce.ibmcloud.com/vulnerabilities/65389