CVE-2011-4409

Published: Jun 16, 2012Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The Ubuntu One Client for Ubuntu 10.04 LTS, 11.04, 11.10, and 12.04 LTS does not properly validate SSL certificates, which allows remote attackers to spoof a server and modify or read sensitive information via a man-in-the-middle (MITM) attack.

Affected (4)

Products: Canonical: Ubuntu Linux

Canonical

1 product

Ubuntu Linux

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 11.04
Canonical Ubuntu Linux	Version 11.10
Canonical Ubuntu Linux	Version 12.04

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (14)

http://secunia.com/advisories/49442

Source: security@ubuntu.com

Vendor Advisory

http://ubuntu.com/usn/usn-1465-1

Source: security@ubuntu.com

Vendor Advisory

http://ubuntu.com/usn/usn-1465-2

Source: security@ubuntu.com

Vendor Advisory

http://ubuntu.com/usn/usn-1465-3

Source: security@ubuntu.com

http://www.osvdb.org/82748

Source: security@ubuntu.com

http://www.securityfocus.com/bid/53828

Source: security@ubuntu.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/76113

Source: security@ubuntu.com

http://secunia.com/advisories/49442