CVEvulnerability
CVE-2011-3152
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-04-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-310
Description
DistUpgrade/DistUpgradeFetcherCore.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134.11.1, 1:0.142.x before 1:0.142.23.1, 1:0.150.x before 1:0.150.5.1, and 1:0.152.x before 1:0.152.25.5 on Ubuntu 8.04 through 11.10 does not verify the GPG signature before extracting an upgrade tarball, which allows man-in-the-middle attackers to (1) create or overwrite arbitrary files via a directory traversal attack using a crafted tar file, or (2) bypass authentication via a crafted meta-release file.
Affected configurations
• canonical update-manager (<= 1\:0.87.24)
• canonical update-manager 1\
• canonical ubuntu linux 8.04
• canonical ubuntu linux 10.04
• canonical ubuntu linux 10.10
• canonical ubuntu linux 11.04
• canonical ubuntu linux 11.10
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/47024 secunia.com
- http://www.osvdb.org/77642 www.osvdb.org
- http://www.securityfocus.com/bid/50833 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1284-1 Vendor Advisory
- https://bugs.launchpad.net/ubuntu/%2Bsource/update-manager/%2Bbug/881548 bugs.launchpad.net
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71494 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/47024 secunia.com
- http://www.osvdb.org/77642 www.osvdb.org
- http://www.securityfocus.com/bid/50833 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1284-1 Vendor Advisory
- https://bugs.launchpad.net/ubuntu/%2Bsource/update-manager/%2Bbug/881548 bugs.launchpad.net
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71494 exchange.xforce.ibmcloud.com