Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu 12.10: USN-1779-1 Moderate GNOME Online Accounts Info Leak

ubuntu
Calendar Grey March 25, 2013
Scroller Ubuntu
A security vulnerability in GNOME Online Accounts on Ubuntu has been revealed, risking exposure of sensitive data via network issues. Users should update promptly
GNOME Online Accounts could be made to expose sensitive information over the network.

Summary

GNOME Online Accounts could be made to expose sensitive information over

the network.

Software Description:

- gnome-online-accounts: GNOME Online Accounts

Details:

It was discovered that GNOME Online Accounts did not properly check SSL

certificates when configuring online accounts. If a remote attacker were

able to perform a man-in-the-middle attack, this flaw could be exploited to

alter or compromise credentials and confidential information.

Topics%20covered

Topics Covered

security advisory moderate info leak ubuntu man-in-the-middle network exposure gnome-online-accounts

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.10:
  gnome-online-accounts           3.6.0-0ubuntu1.1
  libgoa-1.0-0                    3.6.0-0ubuntu1.1

Ubuntu 12.04 LTS:
  gnome-online-accounts           3.4.0-0ubuntu1.1
  libgoa-1.0-0                    3.4.0-0ubuntu1.1

Ubuntu 11.10:
  gnome-online-accounts           3.2.1-0ubuntu1.1
  libgoa-1.0-0                    3.2.1-0ubuntu1.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1779-1

CVE-2013-0240, CVE-2013-1799

Severity
important
Lowest
Low
Medium
High
Critical

March 25, 2013

Topics%20covered

Topics Covered

security advisory moderate info leak ubuntu man-in-the-middle network exposure gnome-online-accounts

Package Information

https://launchpad.net/ubuntu/+source/gnome-online-accounts/3.6.0-0ubuntu1.1
https://launchpad.net/ubuntu/+source/gnome-online-accounts/3.4.0-0ubuntu1.1
https://launchpad.net/ubuntu/+source/gnome-online-accounts/3.2.1-0ubuntu1.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.