PT-2011-4274 · Canonical · Ubuntu Software Center

David B · Publicado 2011-11-29 · Atualizado 2017-08-29 · CVE-2011-3150

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ubuntu Software Center versions 11.10, 11.04, 10.10

Description The issue allows remote attackers to execute arbitrary code or obtain sensitive information via a man-in-the-middle (MITM) attack, due to improper validation of server certificates.

Recommendations For Ubuntu Software Center version 11.10, update the certificate validation mechanism to properly verify server certificates. For Ubuntu Software Center version 11.04, update the certificate validation mechanism to properly verify server certificates. For Ubuntu Software Center version 10.10, update the certificate validation mechanism to properly verify server certificates.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-3150

Produtos afetados

Ubuntu Software Center

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2011-3150 · Nota de Segurança
• http://secunia.com/advisories/46950 · Aviso do Fabricante
• http://ubuntu.com/usn/USN-1270-1 · Aviso do Fabricante
• http://securityfocus.com/bid/50754 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71430 · Nota