Description
The Single Sign On Client (ubuntu-sso-client) for Ubuntu 11.04 and 11.10 does not properly validate SSL certificates when using HTTPS, which allows remote attackers to spoof a server and modify or read sensitive data via a man-in-the-middle (MITM) attack.
References
- ubuntussoclient-ssl-info-disc(76112) vdb-entry
- USN-1464-1 vendor-advisory
- 82747 vdb-entry
- 53829 vdb-entry
- 49448 third-party-advisory