CVE-2012-0055 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.8 HIGH	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 59%

Affected Products (NVD)

Vendor	Product	Version
linux	linux_kernel	𝑥 < 3.0.0
canonical	ubuntu_linux	10.04
canonical	ubuntu_linux	11.10

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

linux

hardy	not-affected
lucid	not-affected
maverick	not-affected
natty	not-affected
oneiric	Fixed 3.0.0-16.27 released
precise	not-affected
quantal	not-affected
saucy	not-affected
trusty	not-affected
utopic	not-affected
vivid	not-affected
wily	not-affected
xenial	not-affected
yakkety	not-affected
zesty	not-affected

linux-aws

precise	dne
trusty	not-affected
xenial	not-affected
yakkety	dne
zesty	dne

linux-ec2

hardy	dne
lucid	not-affected
maverick	ignored
natty	dne
oneiric	dne
precise	dne
quantal	dne
saucy	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-flo

lucid	dne
precise	dne
quantal	dne
saucy	dne
trusty	dne
utopic	not-affected
vivid	not-affected
wily	not-affected
xenial	not-affected
yakkety	not-affected
zesty	dne

linux-fsl-imx51

hardy	dne
lucid	not-affected
maverick	dne
natty	dne
oneiric	dne
precise	dne
quantal	dne
saucy	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-gke

precise	dne
trusty	dne
xenial	not-affected
yakkety	dne
zesty	dne

linux-goldfish

lucid	dne
precise	dne
quantal	dne
saucy	ignored
trusty	dne
utopic	not-affected
vivid	not-affected
wily	not-affected
xenial	not-affected
yakkety	not-affected
zesty	not-affected

linux-grouper

lucid	dne
precise	dne
quantal	dne
saucy	ignored
trusty	dne
utopic	ignored
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-hwe

precise	dne
trusty	dne
xenial	not-affected
yakkety	dne
zesty	dne

linux-hwe-edge

precise	dne
trusty	dne
xenial	not-affected
yakkety	dne
zesty	dne

linux-lts-backport-maverick

hardy	dne
lucid	not-affected
maverick	dne
natty	dne
oneiric	dne
precise	dne
quantal	dne
saucy	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-backport-natty

hardy	dne
lucid	not-affected
maverick	dne
natty	dne
oneiric	dne
precise	dne
quantal	dne
saucy	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-backport-oneiric

hardy	dne
lucid	Fixed 3.0.0-16.28~lucid1 released
maverick	dne
natty	dne
oneiric	dne
precise	dne
quantal	dne
saucy	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-trusty

lucid	dne
precise	not-affected
saucy	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-utopic

lucid	dne
precise	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-vivid

lucid	dne
precise	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-wily

precise	dne
trusty	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-lts-xenial

precise	dne
trusty	not-affected
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-maguro

lucid	dne
precise	dne
quantal	dne
saucy	ignored
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-mako

lucid	dne
precise	dne
quantal	dne
saucy	ignored
trusty	dne
utopic	not-affected
vivid	not-affected
wily	not-affected
xenial	not-affected
yakkety	not-affected
zesty	dne

linux-manta

lucid	dne
precise	dne
quantal	dne
saucy	ignored
trusty	dne
utopic	not-affected
vivid	not-affected
wily	not-affected
xenial	dne
yakkety	dne
zesty	dne

linux-mvl-dove

hardy	dne
lucid	not-affected
maverick	not-affected
natty	dne
oneiric	dne
precise	dne
quantal	dne
saucy	dne
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

linux-raspi2

precise	dne
trusty	dne
vivid	dne
wily	not-affected
xenial	not-affected
yakkety	not-affected
zesty	not-affected

linux-snapdragon

precise	dne
trusty	dne
wily	dne
xenial	not-affected
yakkety	not-affected
zesty	not-affected

linux-ti-omap4

hardy	dne
lucid	dne
maverick	not-affected
natty	not-affected
oneiric	Fixed 3.0.0-1207.16 released
precise	not-affected
quantal	not-affected
saucy	not-affected
trusty	dne
utopic	dne
vivid	dne
wily	dne
xenial	dne
yakkety	dne
zesty	dne

Known Exploits!

Common Weakness Enumeration

CWE-862 - Missing Authorization
The software does not perform an authorization check when an actor attempts to access a resource or perform an action.

References

http://www.openwall.com/lists/oss-security/2012/01/17/11

http://www.ubuntu.com/usn/USN-1363-1

http://www.ubuntu.com/usn/USN-1364-1

http://www.ubuntu.com/usn/USN-1384-1

https://access.redhat.com/security/cve/cve-2012-0055

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/915941