CVEvulnerability

CVE-2012-0962

4.3 MEDIUM Published 2012-12-26 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-12-26
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys from a keyserver, which allows remote attackers to install arbitrary package repository GPG keys via a man-in-the-middle (MITM) attack.

Affected configurations

• sebastian heinlein aptdaemon 0.43 • canonical ubuntu linux 11.10 • canonical ubuntu linux 12.04

References