CVE-2010-0834

Base-files <5.0.0ubuntu7.1-5.0.0ubuntu20.10.04.2 - RCE

Title source: llm

Description

The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 and before 5.0.0ubuntu20.10.04.2 on Ubuntu 10.04 LTS, as shipped on Dell Latitude 2110 netbooks, does not require authentication for package installation, which allows remote archive servers and man-in-the-middle attackers to execute arbitrary code via a crafted package.

Scores

EPSS 0.0037
EPSS Percentile 58.7%

Classification

CWE
CWE-287
Status draft

Affected Products (2)

ubuntu/ubuntu_linux
ubuntu/ubuntu_linux

Timeline

Published Aug 10, 2010
Tracked Since Feb 18, 2026