CVE-2011-0724

The Live DVD for Edubuntu 9.10, 10.04 LTS, and 10.10 does not correctly regenerate iTALC private keys after installation, which causes each installation to have the same fixed key, which allows remote attackers to gain privileges.
Severity
UNKNOWN
AV:N/AC:M/Au:N/C:C/I:C/A:C
Atk. Vector
NETWORK
Atk. Complexity
MEDIUM
Base Score
CVSS 3.x
EPSS Score
Percentile: 68%
VendorProductVersion
ubuntuedubuntu
9.10
ubuntuedubuntu
10.04
ubuntuedubuntu
10.10
ubuntulive_dvd
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/46346
http://www.ubuntu.com/usn/USN-1061-1
http://www.vupen.com/english/advisories/2011/0378
https://exchange.xforce.ibmcloud.com/vulnerabilities/65389