CVE-2012-0944: Medium severity Sebastian Heinlein Aptdaemon vulnerability
Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is not simulated, which allows remote attackers to install arbitrary packages via a man-in-the-middle attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0944?
CVE-2012-0944 is classified as a high-severity vulnerability due to its potential for arbitrary package installation by remote attackers.
How do I fix CVE-2012-0944?
To fix CVE-2012-0944, upgrade Aptdaemon to version 0.43 or later as well as update your Ubuntu system to a non-vulnerable version.
Which versions of Aptdaemon are affected by CVE-2012-0944?
CVE-2012-0944 affects Aptdaemon versions up to and including 0.42.
On which Ubuntu releases does CVE-2012-0944 exist?
CVE-2012-0944 exists on Ubuntu releases 11.04, 11.10, and 12.04 LTS.
What impact does CVE-2012-0944 have on system security?
CVE-2012-0944 allows attackers to conduct man-in-the-middle attacks, enabling them to install malicious packages on the target system.