CVE-2012-0961

Apt <0.8.16~exp5ubuntu13.6-0.9.7.5ubuntu5.2 - Info Disclosure

Title source: llm

Description

Apt 0.8.16~exp5ubuntu13.x before 0.8.16~exp5ubuntu13.6, 0.8.16~exp12ubuntu10.x before 0.8.16~exp12ubuntu10.7, and 0.9.7.5ubuntu5.x before 0.9.7.5ubuntu5.2, as used in Ubuntu, uses world-readable permissions for /var/log/apt/term.log, which allows local users to obtain sensitive shell information by reading the log file.

References (4)

Core 4

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/56917

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/51568

Patch, Vendor Advisory vendor-advisory x_refsource_ubuntu

http://www.ubuntu.com/usn/USN-1662-1

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/88380

Scores

EPSS 0.0035

EPSS Percentile 27.3%

Details

CWE

CWE-200

Status published

Products (2)

debian/advanced_package_tool 0.8.16

debian/apt 0.9.7

Published Dec 26, 2012

Tracked Since Feb 18, 2026