CVE-2013-1067

Publication date 24 October 2013

Last updated 24 July 2024

Ubuntu priority

Description

Apport 2.12.5 and earlier uses weak permissions for core dump files created by setuid binaries, which allows local users to obtain sensitive information by reading the file.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
apport	13.10 saucy	Fixed in 2.12.5-0ubuntu2.1
	13.04 raring	Fixed in 2.9.2-0ubuntu8.5
	12.10 quantal	Fixed in 2.6.1-0ubuntu13
	12.04 LTS precise	Fixed in 2.0.1-0ubuntu17.6
	10.04 LTS lucid	Ignored