CVE search · CVE-2010-0834
CVE-2010-0834
high 9.3
The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 and before 5.0.0ubuntu20.10.04.2 on Ubuntu 10.04 LTS, as shipped on Dell Latitude 2110 netbooks, does not require authentication for package installation, which allows remote archive servers and man-in-the-middle attackers to execute arbitrary code via a crafted package.
Details
- Status
- Modified
- Published
- Last changed
- Source
- security@ubuntu.com
- Weakness
- CWE-287
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 2.0 | high 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- ubuntu · ubuntu_linux
References
- http://secunia.com/advisories/40889Vendor Advisory
- http://www.securityfocus.com/bid/42280Patch
- http://www.ubuntu.com/usn/usn-968-1
- http://www.vupen.com/english/advisories/2010/2015Vendor Advisory
- http://secunia.com/advisories/40889Vendor Advisory
- http://www.securityfocus.com/bid/42280Patch
- http://www.ubuntu.com/usn/usn-968-1
- http://www.vupen.com/english/advisories/2010/2015Vendor Advisory