medium4.9
CVE-2011-0725
Absolute path traversal vulnerability in the org.debian.apt.UpdateCachePartially method in worker.py in Aptdaemon 0.40 in Ubuntu 10.10 and 11.04 allows local u…
Impact
Absolute path traversal vulnerability in the org.debian.apt.UpdateCachePartially method in worker.py in Aptdaemon 0.40 in Ubuntu 10.10 and 11.04 allows local users to read arbitrary files via a full pathname in the sources_list argument, related to the D-Bus interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sebastian Heinlein | Aptdaemon | Version 0.40 |
| Canonical | Ubuntu Linux | Versions 10.10, 11.04 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/46490
- http://www.securitytracker.com/id?1025107
- http://www.ubuntu.com/usn/USN-1068-1
- http://www.vupen.com/english/advisories/2011/0459
- https://bugs.launchpad.net/bugs/722228
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65652
- http://www.securityfocus.com/bid/46490
- http://www.securitytracker.com/id?1025107
- http://www.ubuntu.com/usn/USN-1068-1
- http://www.vupen.com/english/advisories/2011/0459
- https://bugs.launchpad.net/bugs/722228
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65652