Ubuntu Software Properties PPA GPG Keys Validation Security Bypass Vulnerability
BID:55736
Info
Ubuntu Software Properties PPA GPG Keys Validation Security Bypass Vulnerability
| Bugtraq ID: | 55736 |
| Class: | Design Error |
| CVE: |
CVE-2012-5356 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 01 2012 12:00AM |
| Updated: | Oct 12 2012 06:30PM |
| Credit: | Marc Deslauriers |
| Vulnerable: |
Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 11.10 i386 Ubuntu Ubuntu Linux 11.10 amd64 Ubuntu Ubuntu Linux 11.04 powerpc Ubuntu Ubuntu Linux 11.04 i386 Ubuntu Ubuntu Linux 11.04 ARM Ubuntu Ubuntu Linux 11.04 amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 |
| Not Vulnerable: | |
Discussion
Ubuntu Software Properties PPA GPG Keys Validation Security Bypass Vulnerability
Ubuntu Software Properties is prone to a security-bypass vulnerability.
An attacker may exploit this issue to trick a user into installing arbitrary PPA GPG keys through man-in-the-middle attacks. This may allow the attacker to install malicious packages and execute arbitrary code on a vulnerable computer.
Ubuntu Software Properties is prone to a security-bypass vulnerability.
An attacker may exploit this issue to trick a user into installing arbitrary PPA GPG keys through man-in-the-middle attacks. This may allow the attacker to install malicious packages and execute arbitrary code on a vulnerable computer.
Exploit / POC
Ubuntu Software Properties PPA GPG Keys Validation Security Bypass Vulnerability
An attacker can exploit this issue by performing a man-in-the-middle attack.
An attacker can exploit this issue by performing a man-in-the-middle attack.
Solution / Fix
Ubuntu Software Properties PPA GPG Keys Validation Security Bypass Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Ubuntu Software Properties PPA GPG Keys Validation Security Bypass Vulnerability
References:
References:
- Ubuntu Homepage (Ubuntu)