CVE-2011-4409
Priority
Medium
Description
The Ubuntu One Client for Ubuntu 10.04 LTS, 11.04, 11.10, and 12.04 LTS
does not properly validate SSL certificates, which allows remote attackers
to spoof a server and modify or read sensitive information via a
man-in-the-middle (MITM) attack.
does not properly validate SSL certificates, which allows remote attackers
to spoof a server and modify or read sensitive information via a
man-in-the-middle (MITM) attack.
References
Assigned-to
mdeslaur
Package
| Upstream: | needs-triage |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (1.2.2-0ubuntu2.2) |
| Ubuntu 11.04 (Natty Narwhal): | released (1.6.2-0ubuntu2.1) |
| Ubuntu 11.10 (Oneiric Ocelot): | released (2.0.1-0ubuntu1.1) |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (3.0.0-0ubuntu1.1) |
| Ubuntu 12.10 (Quantal Quetzal): | not-affected (3.99.0-0ubuntu1) |
Package
| Upstream: | needs-triage |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (1.2.0-0ubuntu1.1) |
| Ubuntu 11.04 (Natty Narwhal): | released (1.6.1-0ubuntu1.2) |
| Ubuntu 11.10 (Oneiric Ocelot): | released (2.0.1-0ubuntu1.1) |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (3.0.0-0ubuntu1.1) |
| Ubuntu 12.10 (Quantal Quetzal): | released (3.99.0-0ubuntu1) |