{"attribution":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","cve":{"id":"CVE-2010-0834","sourceIdentifier":"security@ubuntu.com","published":"2010-08-10T12:23:05.850","lastModified":"2026-06-16T23:16:56.007","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 and before 5.0.0ubuntu20.10.04.2 on Ubuntu 10.04 LTS, as shipped on Dell Latitude 2110 netbooks, does not require authentication for package installation, which allows remote archive servers and man-in-the-middle attackers to execute arbitrary code via a crafted package."},{"lang":"es","value":"El paquete base-files anterior a v5.0.0ubuntu7.1 en Ubuntu v9.10 y anterior a v5.0.0ubuntu20.10.04.2 en Ubuntu v10.04 LTS, como los incluidos en portátiles Dell Latitude 2110, no necesitan autenticación para la instalación de paquetes, lo que permite a atacantes con servidores de archivos remotos y \"man-in-the-middle\" (intermediario)  ejecutar código de su elección a través de paquetes manipulados."}],"affected":[{"source":"security@ubuntu.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:9.10:*:*:*:*:*:*:*","matchCriteriaId":"27C9BF8A-AD42-401F-A8CA-486B6DCD47BB"},{"vulnerable":true,"criteria":"cpe:2.3:o:ubuntu:ubuntu_linux:10.04:-:lts:*:*:*:*:*","matchCriteriaId":"3976D70F-3D30-4EFF-9777-C687B293606B"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:dell:latitude_2110_netbook:*:*:*:*:*:*:*:*","matchCriteriaId":"30DE3567-65F0-431D-B12A-B2764BA313FB"}]}]}],"references":[{"url":"http://secunia.com/advisories/40889","source":"security@ubuntu.com","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/42280","source":"security@ubuntu.com","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-968-1","source":"security@ubuntu.com"},{"url":"http://www.vupen.com/english/advisories/2010/2015","source":"security@ubuntu.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40889","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/42280","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.ubuntu.com/usn/usn-968-1","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2010/2015","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}