CVE-2012-0961

Publication date 12 December 2012

Last updated 24 July 2024

Ubuntu priority

Apt 0.8.16~exp5ubuntu13.x before 0.8.16~exp5ubuntu13.6, 0.8.16~exp12ubuntu10.x before 0.8.16~exp12ubuntu10.7, and 0.9.7.5ubuntu5.x before 0.9.7.5ubuntu5.2, as used in Ubuntu, uses world-readable permissions for /var/log/apt/term.log, which allows local users to obtain sensitive shell information by reading the log file.

Read the notes from the security team

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
apt	12.10 quantal	Fixed 0.9.7.5ubuntu5.2
	12.04 LTS precise	Fixed 0.8.16~exp12ubuntu10.7
	11.10 oneiric	Fixed 0.8.16~exp5ubuntu13.6
	10.04 LTS lucid	Not affected
	8.04 LTS hardy	Not affected

How can I get the fixes?
What do statuses mean?

Notes

mdeslaur

This was introduced in Oneiric, as the fix for bug 404724

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-1662-1
APT vulnerability
12 December 2012

Other references

https://www.cve.org/CVERecord?id=CVE-2012-0961