CVE-2012-0948: Canonical Ubuntu Linux

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

DistUpgrade/DistUpgradeMain.py in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uses weak permissions for (1) apt-clone_system_state.tar.gz and (2) system_state.tar.gz, which allows local users to obtain repository credentials.

Affected products

• Canonical Ubuntu Linux: version 11.04 only; version 11.10 only; version 12.04 only
• Gnome Update-Manager-Core: version 0.150.5.2 only; version 0.152.25.10 only; version 0.156.14.3 only

Published 2012-06-07. Last modified 2026-06-16.