Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-0725
HistoryFeb 22, 2011 - 12:00 a.m.

CVE-2011-0725

2011-02-2200:00:00
ubuntu.com
ubuntu.com
11

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

EPSS

0

Percentile

5.1%

Absolute path traversal vulnerability in the
org.debian.apt.UpdateCachePartially method in worker.py in Aptdaemon 0.40
in Ubuntu 10.10 and 11.04 allows local users to read arbitrary files via a
full pathname in the sources_list argument, related to the D-Bus interface.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu10.10noarchaptdaemon< 0.31+bzr506-0ubuntu6.1UNKNOWN

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

EPSS

0

Percentile

5.1%