CVE-2012-0949

Name: CVE-2012-0949
Creator: NVD / NIST
Published: 2012-05-31T17:55:02.887+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 2.12%

Last modified Jun 16, 2026

CVE-2012-0949 is a vulnerability of currently unknown severity. The Apport hook in Update Manager as used by Ubuntu 12.04 LTS, 11.10, and 11.04 uploads certain system state archive files when reporting bugs to Launchpad, which allows remote attackers to read repository credentials by viewing a public bug report.. EPSS estimates a 2.12% chance of exploitation in the next 30 days.

Description

The Apport hook in Update Manager as used by Ubuntu 12.04 LTS, 11.10, and 11.04 uploads certain system state archive files when reporting bugs to Launchpad, which allows remote attackers to read repository credentials by viewing a public bug report.

Metrics

EPSS Probability

2.12%

79.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-200

Affected Software

Vendor	Product	Versions
Canonical	Ubuntu Linux	11.04
Canonical	Ubuntu Linux	11.10
Canonical	Ubuntu Linux	12.04

References

http://osvdb.org/82020
http://secunia.com/advisories/49230Vendor Advisory
http://www.securityfocus.com/bid/53605
http://www.ubuntu.com/usn/USN-1443-1Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/75728
http://osvdb.org/82020
http://secunia.com/advisories/49230Vendor Advisory
http://www.securityfocus.com/bid/53605
http://www.ubuntu.com/usn/USN-1443-1Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/75728

Timeline

Published: May 31, 2012
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2012-0949?

How severe is CVE-2012-0949?

Severity scoring for CVE-2012-0949 is pending analysis. The EPSS model estimates a 2.12% probability of exploitation in the next 30 days.

How do I fix CVE-2012-0949?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2012-0949?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST