NetSight
IP …
high7.5

CVE-2011-4409

The Ubuntu One Client for Ubuntu 10.04 LTS, 11.04, 11.10, and 12.04 LTS does not properly validate SSL certificates, which allows remote attackers to spoof a s…

Impact

The Ubuntu One Client for Ubuntu 10.04 LTS, 11.04, 11.10, and 12.04 LTS does not properly validate SSL certificates, which allows remote attackers to spoof a server and modify or read sensitive information via a man-in-the-middle (MITM) attack.

Affected products

VendorProductAffected versions
CanonicalUbuntu Linux
Versions 10.04, 11.04, 11.10, 12.04

Weakness classification

CWE-20

References