CVE-2012-0944

aptdaemon < 0.43 - Unauthenticated Arbitrary Package Installation via Man-in-the-Middle

Title source: llm
STIX 2.1

Description

Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is not simulated, which allows remote attackers to install arbitrary packages via a man-in-the-middle attack.

References (6)

Core 6
Core References
Various Sources vendor-advisory x_refsource_ubuntu
http://ubuntu.com/usn/usn-1414-1
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/52855
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/80887
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/74553
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48688

Scores

EPSS 0.0121
EPSS Percentile 64.7%

Details

CWE
CWE-287
Status published
Products (12)
canonical/ubuntu_linux 11.04
canonical/ubuntu_linux 11.10
canonical/ubuntu_linux 12.04 lts
sebastian_heinlein/aptdaemon 0.20
sebastian_heinlein/aptdaemon 0.30
sebastian_heinlein/aptdaemon 0.31
sebastian_heinlein/aptdaemon 0.32
sebastian_heinlein/aptdaemon 0.33
sebastian_heinlein/aptdaemon 0.34
sebastian_heinlein/aptdaemon 0.40
... and 2 more
Published Jun 04, 2012
Tracked Since Feb 18, 2026