Ubuntu One storage protocol update

2012-06-0600:00:00

ubuntu.com

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.009

Percentile

82.8%

JSON

Releases

Ubuntu 12.04
Ubuntu 11.10
Ubuntu 11.04
Ubuntu 10.04

Packages

ubuntuone-storage-protocol - Python library for Ubuntu One file storage and sharing service

Details

USN-1465-1 fixed a vulnerability in the Ubuntu One Client. This update adds
a required fix to the Ubuntu One storage protocol library.

Original advisory details:

It was discovered that the Ubuntu One Client incorrectly validated server
certificates when using HTTPS connections. If a remote attacker were able
to perform a machine-in-the-middle attack, this flaw could be exploited to
alter or compromise confidential information.

OSVersionArchitecturePackageVersionFilename
Ubuntu12.04noarchpython-ubuntuone-storageprotocol< 3.0.0-0ubuntu1.1UNKNOWN
Ubuntu11.10noarchpython-ubuntuone-storageprotocol< 2.0.1-0ubuntu1.1UNKNOWN
Ubuntu11.04noarchpython-ubuntuone-storageprotocol< 1.6.1-0ubuntu1.2UNKNOWN
Ubuntu10.04noarchpython-ubuntuone-storageprotocol< 1.2.0-0ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	12.04	noarch	python-ubuntuone-storageprotocol	< 3.0.0-0ubuntu1.1	UNKNOWN
Ubuntu	11.10	noarch	python-ubuntuone-storageprotocol	< 2.0.1-0ubuntu1.1	UNKNOWN
Ubuntu	11.04	noarch	python-ubuntuone-storageprotocol	< 1.6.1-0ubuntu1.2	UNKNOWN
Ubuntu	10.04	noarch	python-ubuntuone-storageprotocol	< 1.2.0-0ubuntu1.1	UNKNOWN