4.3

CVE-2012-0944

Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is not simulated, which allows remote attackers to install arbitrary packages via a man-in-the-middle attack.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sebastian Heinlein ≫ Aptdaemon Version <= 0.42
Sebastian Heinlein ≫ Aptdaemon Version 0.20
Sebastian Heinlein ≫ Aptdaemon Version 0.30
Sebastian Heinlein ≫ Aptdaemon Version 0.31
Sebastian Heinlein ≫ Aptdaemon Version 0.32
Sebastian Heinlein ≫ Aptdaemon Version 0.33
Sebastian Heinlein ≫ Aptdaemon Version 0.34
Sebastian Heinlein ≫ Aptdaemon Version 0.40
Sebastian Heinlein ≫ Aptdaemon Version 0.41
Canonical ≫ Ubuntu Linux Version 11.04
Canonical ≫ Ubuntu Linux Version 11.10
Canonical ≫ Ubuntu Linux Version 12.04 Update lts
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.21% 0.645
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://secunia.com/advisories/48688
Vendor Advisory
http://ubuntu.com/usn/usn-1414-1
http://www.osvdb.org/80887
http://www.securityfocus.com/bid/52855
https://bugs.launchpad.net/ubuntu/%2Bsource/aptdaemon/%2Bbug/959131
https://exchange.xforce.ibmcloud.com/vulnerabilities/74553