CVE-2011-0724

The Live DVD for Edubuntu 9.10, 10.04 LTS, and 10.10 does not correctly regenerate iTALC private keys after installation, which causes each installation to have the same fixed key, which allows remote attackers to gain privileges.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
canonicalCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 77%
VendorProductVersion
ubuntuedubuntu
9.10
ubuntuedubuntu
10.04
ubuntuedubuntu
10.10
ubuntulive_dvd
*
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
italc
maverick
Fixed 1:1.0.9.1-0ubuntu18.10.10.1
released
lucid
Fixed 1:1.0.9.1-0ubuntu18.10.04.1
released
karmic
Fixed 1:1.0.9.1-0ubuntu16.1
released
hardy
not-affected
dapper
not-affected
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/46346
http://www.ubuntu.com/usn/USN-1061-1
http://www.vupen.com/english/advisories/2011/0378
https://exchange.xforce.ibmcloud.com/vulnerabilities/65389
http://www.securityfocus.com/bid/46346
http://www.ubuntu.com/usn/USN-1061-1
http://www.vupen.com/english/advisories/2011/0378
https://exchange.xforce.ibmcloud.com/vulnerabilities/65389