Lucene search

K
ubuntuUbuntuUSN-968-1
HistoryAug 05, 2010 - 12:00 a.m.

Dell Latitude 2110 vulnerability

2010-08-0500:00:00
ubuntu.com
35

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

77.9%

Releases

  • Ubuntu 10.04
  • Ubuntu 9.10

Packages

  • base-files - Debian base system files

Details

It was discovered that the Ubuntu image shipped on some Dell Latitude
2110 systems was accidentally configured to allow unauthenticated package
installations. A remote attacker intercepting network communications or
a malicious archive mirror server could exploit this to trick the user
into installing unsigned packages, resulting in arbitrary code execution
with root privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.10noarchbase-files< 5.0.0ubuntu7.1UNKNOWN
Ubuntu10.04noarchbase-files< 5.0.0ubuntu20.10.04.2UNKNOWN

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

77.9%