NetSight
IP …
medium4.3

CVE-2012-0944

Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is not simulated, which allows remote atta…

Impact

Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is not simulated, which allows remote attackers to install arbitrary packages via a man-in-the-middle attack.

Affected products

VendorProductAffected versions
Sebastian HeinleinAptdaemon
through 0.42
Versions 0.20, 0.30, 0.31, 0.32, 0.33
CanonicalUbuntu Linux
Versions 11.04, 11.10, 12.04

Weakness classification

CWE-287

References