CVE-2011-0724 The Live DVD for Edubuntu 9.10, 10.04 LTS, and 10.10 does not correctly regenerate iTALC private keys after installation, which causes each installation to have the same fixed key, which allows remote...
HighCVSS 9.3
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Live DVD for Edubuntu 9.10, 10.04 LTS, and 10.10 does not correctly regenerate iTALC private keys after installation, which causes each installation to have the same fixed key, which allows remote attackers to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu edubuntu | = 9.10 | No fix listed |
| ubuntu edubuntu | = 10.04 | No fix listed |
| ubuntu edubuntu | = 10.10 | No fix listed |
| ubuntu live dvd | All versions | No fix listed |
References
- 46346 vdb-entry
- USN-1061-1 vendor-advisory
- ADV-2011-0378 vdb-entry vendor-advisory
- italc-keys-security-bypass(65389) vdb-entry