Test ID:	1.3.6.1.4.1.25623.1.0.841009
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-1443-1)
Summary:	The remote host is missing an update for the 'update-manager' package(s) announced via the USN-1443-1 advisory.
Description:	Summary: The remote host is missing an update for the 'update-manager' package(s) announced via the USN-1443-1 advisory. Vulnerability Insight: It was discovered that Update Manager created system state archive files with incorrect permissions when upgrading releases. A local user could possibly use this to read repository credentials. (CVE-2012-0948) Felix Geyer discovered that the Update Manager Apport hook incorrectly uploaded certain system state archive files to Launchpad when reporting bugs. This could possibly result in repository credentials being included in public bug reports. (CVE-2012-0949) Affected Software/OS: 'update-manager' package(s) on Ubuntu 11.04, Ubuntu 11.10, Ubuntu 12.04. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0948 BugTraq ID: 53604 http://www.securityfocus.com/bid/53604 http://osvdb.org/82019 http://secunia.com/advisories/49230 http://www.ubuntu.com/usn/USN-1443-1 XForce ISS Database: update-manager-info-disclosure(75727) https://exchange.xforce.ibmcloud.com/vulnerabilities/75727 Common Vulnerability Exposure (CVE) ID: CVE-2012-0949 BugTraq ID: 53605 http://www.securityfocus.com/bid/53605 http://osvdb.org/82020 XForce ISS Database: update-manager-archives-info-disclosure(75728) https://exchange.xforce.ibmcloud.com/vulnerabilities/75728
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.