CVE-2012-2092

Publication date 6 December 2019

Last updated 24 July 2024

Ubuntu priority

Cvss 3 Severity Score

A Security Bypass vulnerability exists in Ubuntu Cobbler before 2,2,2 in the cobbler-ubuntu-import script due to an error when verifying the GPG signature.

Read the notes from the security team

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
cobbler	13.04 raring	Fixed 2.2.2-0ubuntu32
	12.10 quantal	Fixed 2.2.2-0ubuntu32
	12.04 LTS precise	Fixed 2.2.2-0ubuntu32
	11.10 oneiric	Ignored end of life
	11.04 natty	Not affected
	10.04 LTS lucid	Not in release
	8.04 LTS hardy	Not in release
maas-provision	13.04 raring	Not in release
	12.10 quantal	Not in release
	12.04 LTS precise	Not affected
	11.10 oneiric	Not in release
	11.04 natty	Not in release
	10.04 LTS lucid	Not in release
	8.04 LTS hardy	Not in release

Notes

jdstrand

maas-provision in 12.04 is a code copy of cobbler, but with reduced features and usage. Only the portions of maas-provision specifically used by maas will recieve official support

Severity score breakdown

Parameter	Value
Base score	5.9 · Medium
Attack vector	Network
Attack complexity	High
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	None
Integrity impact	High
Availability impact	None
Vector	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N