Local Information Disclosure in Ubuntu APT Products

CVE-2012-0961

Summary

This vulnerability in Ubuntu's APT package manager arises from misconfigured permissions of the /var/log/apt/term.log file, which is set to be world-readable. This oversight allows local users to gain unauthorized access to sensitive information stored in the log file, potentially exposing shell commands and other critical data executed by the APT system. Proper permissions should be enforced to mitigate the risk of information disclosure.

References