CVE-2011-3150

EPSS 1.04%
Veröffentlicht 29.11.2011 17:55:00
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Software Center in Ubuntu 11.10, 11.04 10.10 does not properly validate server certificates, which allows remote attackers to execute arbitrary code or obtain sensitive information via a man-in-the-middle (MITM) attack.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Canonical ≫ Ubuntu Linux Version10.10

Canonical ≫ Ubuntu Linux Version11.04

Canonical ≫ Ubuntu Linux Version11.10

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.04%	0.754

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/46950

Vendor Advisory

http://www.securityfocus.com/bid/50754

Vendor Advisory

http://www.ubuntu.com/usn/USN-1270-1

Patch

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/71430

https://nvd.nist.gov/vuln/detail/CVE-2011-3150

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-3150

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-3150

EUVD