CVE-2012-4571

Related Files

Ubuntu Security Notice USN-1634-1

Posted Nov 20, 2012

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1634-1 - Dwayne Litzenberger discovered that Python Keyring's CryptedFileKeyring file format used weak cryptography. A local attacker may use this issue to brute-force CryptedFileKeyring keyring files. This issue only affected Ubuntu 11.10 and Ubuntu 12.04 LTS. It was discovered that Python Keyring created keyring files with insecure permissions. A local attacker could use this issue to access keyring files belonging to other users. Various other issues were also addressed.

tags | advisory, local, python

systems | linux, ubuntu

advisories | CVE-2012-4571, CVE-2012-4571

SHA-256 | 617f521bfd666e63b40586802f675ff86e720d608bb26d70393ac1dbe702adcb

Download | Favorite | View