← back
CVE-2012-0944

CVE-2012-0944

EPSS 1.2%
Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is not simulated, which allows remote attackers to install arbitrary packages via a man-in-the-middle attack.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://bugs.launchpad.net/ubuntu/%2Bsource/aptdaemon/%2Bbug/959131http://secunia.com/advisories/48688https://exchange.xforce.ibmcloud.com/vulnerabilities/74553http://ubuntu.com/usn/usn-1414-1http://www.osvdb.org/80887http://www.securityfocus.com/bid/52855