CVE-2012-0962: Medium severity aptdaemon project vulnerability
Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys from a keyserver, which allows remote attackers to install arbitrary package repository GPG keys via a man-in-the-middle (MITM) attack.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0962?
CVE-2012-0962 has a medium severity rating due to the potential for remote attackers to exploit it via a man-in-the-middle attack.
What does CVE-2012-0962 affect?
CVE-2012-0962 affects Aptdaemon version 0.43 on Ubuntu versions 11.10 and 12.04 LTS.
How do I fix CVE-2012-0962?
To fix CVE-2012-0962, you should upgrade Aptdaemon to the latest version that no longer uses short IDs for importing GPG keys.
Can CVE-2012-0962 be exploited remotely?
Yes, CVE-2012-0962 can be exploited remotely by attackers through a man-in-the-middle attack.
What is the impact of CVE-2012-0962?
The impact of CVE-2012-0962 is that it allows installation of arbitrary package repository GPG keys, which could lead to further exploitation.