Unscored CVE-2011-0725 EUVD-2011-0739GHSA-3qfx-62r9-w7q6

Absolute path traversal vulnerability in the org.debian.apt.UpdateCachePartially method in worker.py in Aptdaemon 0.40 in Ubuntu 10.10 and …

Published Feb 23, 2011 · Updated Aug 6, 2024 · Assigned by canonical

Description

Absolute path traversal vulnerability in the org.debian.apt.UpdateCachePartially method in worker.py in Aptdaemon 0.40 in Ubuntu 10.10 and 11.04 allows local users to read arbitrary files via a full pathname in the sources_list argument, related to the D-Bus interface.

References

46490 vdb-entry
ADV-2011-0459 vdb-entry
aptdaemon-updatecache-info-disc(65652) vdb-entry
USN-1068-1 vendor-advisory
1025107 vdb-entry
https://bugs.launchpad.net/bugs/722228