Description
Software Center in Ubuntu 11.10, 11.04 10.10 does not properly validate server certificates, which allows remote attackers to execute arbitrary code or obtain sensitive information via a man-in-the-middle (MITM) attack.
References
- ubuntu-certificate-security-bypass(71430) vdb-entry
- 50754 vdb-entry
- USN-1270-1 vendor-advisory
- 46950 third-party-advisory