PT-2010-2558 · Canonical · Base-Files

Publicado 2010-08-09 · Atualizado 2010-08-10 · CVE-2010-0834

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions base-files versions prior to 5.0.0ubuntu7.1 on Ubuntu 9.10 base-files versions prior to 5.0.0ubuntu20.10.04.2 on Ubuntu 10.04 LTS

Description The issue allows remote archive servers and man-in-the-middle attackers to execute arbitrary code via a crafted package, as the base-files package does not require authentication for package installation.

Recommendations For base-files versions prior to 5.0.0ubuntu7.1 on Ubuntu 9.10, update to version 5.0.0ubuntu7.1 or later. For base-files versions prior to 5.0.0ubuntu20.10.04.2 on Ubuntu 10.04 LTS, update to version 5.0.0ubuntu20.10.04.2 or later.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2010-0834

Produtos afetados

Base-Files

Referências · 5

• http://secunia.com/advisories/40889 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-0834 · Nota de Segurança
• http://ubuntu.com/usn/usn-968-1 · Aviso do Fabricante
• http://vupen.com/english/advisories/2010/2015 · Aviso do Fabricante
• http://securityfocus.com/bid/42280 · Correção