1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
|
PublicDateAtUSN: 2012-04-02
Candidate: CVE-2012-0944
PublicDate: 2012-06-04
References:
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0944
http://www.ubuntu.com/usn/usn-1414-1
Description:
Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not
authenticate packages when the transaction is not simulated, which allows
remote attackers to install arbitrary packages via a man-in-the-middle
attack.
Ubuntu-Description:
Notes:
mdeslaur> only affects natty and higher
Bugs:
https://bugs.launchpad.net/ubuntu/+source/aptdaemon/+bug/959131
Priority: medium
Discovered-by:
Assigned-to: mdeslaur
Patches_aptdaemon:
upstream_aptdaemon: needs-triage
hardy_aptdaemon: DNE
lucid_aptdaemon: not-affected
maverick_aptdaemon: not-affected
natty_aptdaemon: released (0.41+bzr661-0ubuntu0.2)
oneiric_aptdaemon: released (0.43+bzr697-0ubuntu1.2)
devel_aptdaemon: released (0.43+bzr790-0ubuntu1)
|