Skip to main content

Sebastian Heinlein

2 CVEs vendor

Monthly

CVE-2012-0962 Dec 26, 22:55 MEDIUM PATCH This Month

Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys from a keyserver, which allows remote attackers to install arbitrary package repository GPG keys via a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

Information Disclosure Ubuntu Canonical Ubuntu Linux Aptdaemon +1
NVD
CVSS 2.0
4.3
EPSS
0.4%
CVE-2012-0944 Jun 04, 20:55 MEDIUM This Month

Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is not simulated, which allows remote attackers to install arbitrary packages via. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Ubuntu Canonical Ubuntu Linux Aptdaemon +1
NVD
CVSS 2.0
4.3
EPSS
0.5%
EPSS 0% CVSS 4.3
MEDIUM PATCH This Month

Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys from a keyserver, which allows remote attackers to install arbitrary package repository GPG keys via a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

Information Disclosure Ubuntu Canonical +3
NVD
EPSS 0% CVSS 4.3
MEDIUM This Month

Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is not simulated, which allows remote attackers to install arbitrary packages via. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Ubuntu Canonical +3
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy