CVE-2011-3150

Software Center in Ubuntu 11.10, 11.04 10.10 does not properly validate server certificates, which allows remote attackers to execute arbitrary code or obtain sensitive information via a man-in-the-middle (MITM) attack.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2011-11-29

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Ubuntu Linux (Canonical)

References

• http://secunia.com/advisories/46950
• http://www.securityfocus.com/bid/50754
• http://www.ubuntu.com/usn/USN-1270-1
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71430