CVE-2011-4409

EPSS 0.65%
Veröffentlicht 16.06.2012 00:55:05
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle security@ubuntu.com
CVE-Watchlists
Login
Unerledigt
Login

The Ubuntu One Client for Ubuntu 10.04 LTS, 11.04, 11.10, and 12.04 LTS does not properly validate SSL certificates, which allows remote attackers to spoof a server and modify or read sensitive information via a man-in-the-middle (MITM) attack.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Canonical ≫ Ubuntu Linux Version10.04 Update- Editionlts

Canonical ≫ Ubuntu Linux Version11.04

Canonical ≫ Ubuntu Linux Version11.10

Canonical ≫ Ubuntu Linux Version12.04 Update- Editionlts

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.65%	0.685

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/49442

Vendor Advisory

http://ubuntu.com/usn/usn-1465-1

Vendor Advisory

http://ubuntu.com/usn/usn-1465-2

Vendor Advisory

http://ubuntu.com/usn/usn-1465-3

http://www.osvdb.org/82748

http://www.securityfocus.com/bid/53828

https://exchange.xforce.ibmcloud.com/vulnerabilities/76113

https://nvd.nist.gov/vuln/detail/CVE-2011-4409

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-4409

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-4409

EUVD