Lucene search
UbuntuUSN-1465-1HistoryJun 06, 2012 - 12:00 a.m.
Ubuntu One Client vulnerability
2012-06-0600:00:00
ubuntu.com
30
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.3
Confidence
Low
EPSS
0.009
Percentile
82.8%
Releases
- Ubuntu 12.04
- Ubuntu 11.10
- Ubuntu 11.04
- Ubuntu 10.04
Packages
- ubuntuone-client - Ubuntu One client
Details
It was discovered that the Ubuntu One Client incorrectly validated server
certificates when using HTTPS connections. If a remote attacker were able
to perform a machine-in-the-middle attack, this flaw could be exploited to
alter or compromise confidential information.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 12.04 | noarch | python-ubuntuone-client | < 3.0.0-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | gir1.2-syncdaemon-1.0 | < 3.0.0-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libsyncdaemon-1.0-1 | < 3.0.0-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libsyncdaemon-1.0-dev | < 3.0.0-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | ubuntuone-client-dbg | < 3.0.0-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 11.10 | noarch | python-ubuntuone-client | < 2.0.1-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 11.10 | noarch | gir1.2-syncdaemon-1.0 | < 2.0.1-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 11.10 | noarch | libsyncdaemon-1.0-1 | < 2.0.1-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 11.10 | noarch | libsyncdaemon-1.0-dev | < 2.0.1-0ubuntu1.1 | UNKNOWN |
| Ubuntu | 11.10 | noarch | ubuntuone-client-dbg | < 2.0.1-0ubuntu1.1 | UNKNOWN |
References
Related
openvas
openvas
Ubuntu: Security Advisory (USN-1465-3)
2012-06-08 00:00:00
Ubuntu Update for ubuntuone-storage-protocol USN-1465-2
2012-06-08 00:00:00
Ubuntu Update for ubuntuone-client USN-1465-3
2012-06-08 00:00:00
nvd
nvd
CVE-2011-4409
2012-06-16 00:55:05
ubuntu
ubuntu
Ubuntu One Client regression
2012-06-06 00:00:00
Ubuntu One storage protocol update
2012-06-06 00:00:00
ubuntucve
ubuntucve
CVE-2011-4409
2012-06-06 00:00:00
cvelist
cvelist
CVE-2011-4409
2012-06-16 00:00:00
cve
cve
CVE-2011-4409
2012-06-16 00:55:05
nessus
nessus
prion
prion
Code injection
2012-06-16 00:55:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.3
Confidence
Low
EPSS
0.009
Percentile
82.8%
Related for USN-1465-1