Vulnerability in Canonical Ubuntu Linux

CVE-2013-1067

Apport 2.12.5 and earlier uses weak permissions for core dump files created by setuid binaries, which allows local users to obtain sensitive information by reading the file.

EPSS: 0.004 (32.9th percentile) — read the EPSS interpretation.

Affected products

Canonical Ubuntu_linux — versions 12.04, 12.10, 13.04
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

security@ubuntu.com (x_refsource_UBUNTU, vendor-advisory, Vendor Advisory)