Vulnerabilities

TI-2012-00886 CVE-2012-0962 · GHSA-mm8c-h4vv-7fr2

Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys…

LOW 24

Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys from a keyserver, which allows remote attackers to install arbitrary package repository GPG keys via a man-in-the-middle (MITM) atta…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.018 Published 2012-12-26 No fix listed

TI-2012-00868 CVE-2012-0944 · GHSA-363x-qxhw-jjx9

Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate…

LOW 22

Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is not simulated, which allows remote attackers to install arbitrary packages via a man-in-the-middle a…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01197 Published 2012-06-04 No fix listed CWE-287

TI-2011-00633 CVE-2011-0725 · GHSA-3qfx-62r9-w7q6

Absolute path traversal vulnerability in the org.debian.apt.UpdateCachePartially method…

LOW 23

Absolute path traversal vulnerability in the org.debian.apt.UpdateCachePartially method in worker.py in Aptdaemon 0.40 in Ubuntu 10.10 and 11.04 allows local users to read arbitrary files via a full pathname in the sourc…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00392 Published 2011-02-23 No fix listed CWE-22

Vulnerabilities

Filters

Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys…

Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate…

Absolute path traversal vulnerability in the org.debian.apt.UpdateCachePartially method…