CVE-2011-4408

Published: Jun 16, 2012Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

The Single Sign On Client (ubuntu-sso-client) for Ubuntu 11.04 and 11.10 does not properly validate SSL certificates when using HTTPS, which allows remote attackers to spoof a server and modify or read sensitive data via a man-in-the-middle (MITM) attack.

Affected (2)

Products: Canonical: Ubuntu Linux

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 11.04
Canonical Ubuntu Linux	Version 11.10

References (10)

http://osvdb.org/82747

Source: security@ubuntu.com

http://secunia.com/advisories/49448

Source: security@ubuntu.com

Vendor Advisory

http://www.securityfocus.com/bid/53829

Source: security@ubuntu.com

http://www.ubuntu.com/usn/USN-1464-1

Source: security@ubuntu.com

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/76112

Source: security@ubuntu.com

http://osvdb.org/82747

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/49448

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/53829

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1464-1

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/76112

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.