Unscored CVE-2011-4409 EUVD-2011-4338GHSA-8m4g-h664-74qj

The Ubuntu One Client for Ubuntu 10.04 LTS, 11.04, 11.10, and 12.04 LTS does not properly validate SSL certificates, which allows remote at…

Published Jun 16, 2012 · Updated Aug 7, 2024 · Assigned by canonical

Description

The Ubuntu One Client for Ubuntu 10.04 LTS, 11.04, 11.10, and 12.04 LTS does not properly validate SSL certificates, which allows remote attackers to spoof a server and modify or read sensitive information via a man-in-the-middle (MITM) attack.

References

49442 third-party-advisory
USN-1465-3 vendor-advisory
USN-1465-1 vendor-advisory
82748 vdb-entry
USN-1465-2 vendor-advisory
ubuntuoneclient-ssl-info-disc(76113) vdb-entry
53828 vdb-entry