CVE-2011-0725

The CVE-2011-0725 entry concerns Aptdaemon 0.40 on Ubuntu 10.10/11.04. Affected component: org.debian.apt.UpdateCachePartially (worker.py). Root cause: improper filtering of certain D‑Bus arguments via the Aptdaemon interface, enabling an absolute path traversal. Impact: local users can read arbi...

CVE-2012-0962

CVE-2012-0962 concerns Aptdaemon 0.43 on Ubuntu 11.10 and 12.04 LTS, where importing PPA GPG keys from a keyserver used short IDs, enabling a man‑in‑the‑middle attack to install arbitrary PPA keys. The Red Hat and NVD records repeat this description. Impact: attacker could influence which reposit...

CVE-2012-0944

Apt daemon (Aptdaemon) versions 0.43 and earlier on Ubuntu 11.04, 11.10, and 12.04 LTS do not authenticate packages when a transaction is not simulated, enabling a remote attacker to install arbitrary packages via a man-in-the-middle attack. The vulnerability is caused by insufficient authenticat...