CVE-2010-0834

CVE-2010-0834 affects the base-files package in Ubuntu 9.10 (Dell Latitude 2110) and Ubuntu 10.04 LTS prior to the patched versions. The issue allows unauthenticated package installation, enabling remote archive servers or MITM attackers to craft a package that executes arbitrary code with root p...

CVE-2010-0834

The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 and before 5.0.0ubuntu20.10.04.2 on Ubuntu 10.04 LTS, as shipped on Dell Latitude 2110 netbooks, does not require authentication for package installation, which allows remote archive servers and man-in-the-middle attackers to execute...