CVE-2012-3441 on Ubuntu 12.04 LTS (precise) - medium.
Description:
The database creation script (module/idoutils/db/scripts/create_mysqldb.sh) in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors.