usb-creator vulnerability

2013-09-1800:00:00

ubuntu.com

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

Percentile

5.1%

JSON

Releases

Ubuntu 13.04
Ubuntu 12.10
Ubuntu 12.04

Packages

usb-creator - create a startup disk using a CD or disc image

Details

It was discovered that usb-creator was using polkit in an unsafe manner. A
local attacker could possibly use this issue to bypass intended polkit
authorizations.

OSVersionArchitecturePackageVersionFilename
Ubuntu13.04noarchusb-creator-common< 0.2.47.1UNKNOWN
Ubuntu13.04noarchusb-creator-gtk< 0.2.47.1UNKNOWN
Ubuntu13.04noarchusb-creator-kde< 0.2.47.1UNKNOWN
Ubuntu12.10noarchusb-creator-common< 0.2.40ubuntu2UNKNOWN
Ubuntu12.10noarchusb-creator-gtk< 0.2.40ubuntu2UNKNOWN
Ubuntu12.10noarchusb-creator-kde< 0.2.40ubuntu2UNKNOWN
Ubuntu12.04noarchusb-creator-common< 0.2.38.2UNKNOWN
Ubuntu12.04noarchusb-creator-gtk< 0.2.38.2UNKNOWN
Ubuntu12.04noarchusb-creator-kde< 0.2.38.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	13.04	noarch	usb-creator-common	< 0.2.47.1	UNKNOWN
Ubuntu	13.04	noarch	usb-creator-gtk	< 0.2.47.1	UNKNOWN
Ubuntu	13.04	noarch	usb-creator-kde	< 0.2.47.1	UNKNOWN
Ubuntu	12.10	noarch	usb-creator-common	< 0.2.40ubuntu2	UNKNOWN
Ubuntu	12.10	noarch	usb-creator-gtk	< 0.2.40ubuntu2	UNKNOWN
Ubuntu	12.10	noarch	usb-creator-kde	< 0.2.40ubuntu2	UNKNOWN
Ubuntu	12.04	noarch	usb-creator-common	< 0.2.38.2	UNKNOWN
Ubuntu	12.04	noarch	usb-creator-gtk	< 0.2.38.2	UNKNOWN
Ubuntu	12.04	noarch	usb-creator-kde	< 0.2.38.2	UNKNOWN