89 matches found
CVE-2012-0944
Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is not simulated, which allows remote attackers to install arbitrary packages via a man-in-the-middle attack...
Ubuntu Update for aptdaemon vulnerability USN-1068-1
Ubuntu Update for Linux kernel vulnerabilities USN-1068-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10681.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for aptdaemon vulnerability USN-1068-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...
CVE-2011-0725
Absolute path traversal vulnerability in the org.debian.apt.UpdateCachePartially method in worker.py in Aptdaemon 0.40 in Ubuntu 10.10 and 11.04 allows local users to read arbitrary files via a full pathname in the sourceslist argument, related to the D-Bus interface...
Path traversal
Absolute path traversal vulnerability in the org.debian.apt.UpdateCachePartially method in worker.py in Aptdaemon 0.40 in Ubuntu 10.10 and 11.04 allows local users to read arbitrary files via a full pathname in the sourceslist argument, related to the D-Bus interface...
CVE-2011-0725
Absolute path traversal vulnerability in the org.debian.apt.UpdateCachePartially method in worker.py in Aptdaemon 0.40 in Ubuntu 10.10 and 11.04 allows local users to read arbitrary files via a full pathname in the sourceslist argument, related to the D-Bus interface...
CVE-2011-0725
The CVE-2011-0725 entry concerns Aptdaemon 0.40 on Ubuntu 10.10/11.04. Affected component: org.debian.apt.UpdateCachePartially (worker.py). Root cause: improper filtering of certain D‑Bus arguments via the Aptdaemon interface, enabling an absolute path traversal. Impact: local users can read arbi...
CVE-2011-0725: Improper Limitation of a Pathname to a Restricted Directory
Absolute path traversal vulnerability in the org.debian.apt.UpdateCachePartially method in worker.py in Aptdaemon 0.40 in Ubuntu 10.10 and 11.04 allows local users to read arbitrary files via a full pathname in the sourceslist argument, related to the D-Bus interface...
Ubuntu 10.10 : aptdaemon vulnerability (USN-1068-1)
Sergey Nizovtsev discovered that Aptdaemon incorrectly filtered certain arguments when using its D-Bus interface. A local attacker could use this flaw to bypass security restrictions and view sensitive information by reading arbitrary files. Note that Tenable Network Security has extracted the...
USN-1068-1: Aptdaemon vulnerability
Sergey Nizovtsev discovered that Aptdaemon incorrectly filtered certain arguments when using its D-Bus interface. A local attacker could use this flaw to bypass security restrictions and view sensitive information by reading arbitrary files...