CVE-2011-3150

Software Center in Ubuntu 11.10, 11.04 10.10 does not properly validate server certificates, which allows remote attackers to execute arbitrary code or obtain sensitive information via a man-in-the-middle (MITM) attack.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 76%
VendorProductVersion
canonicalubuntu_linux
10.10
canonicalubuntu_linux
11.04
canonicalubuntu_linux
11.10
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
software-center
oneiric
Fixed 5.0.2ubuntu0.1
released
natty
Fixed 4.0.5ubuntu0.1
released
maverick
Fixed 3.0.10ubuntu0.1
released
lucid
not-affected
hardy
dne
Common Weakness Enumeration
References
http://secunia.com/advisories/46950
http://www.securityfocus.com/bid/50754
http://www.ubuntu.com/usn/USN-1270-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/71430
http://secunia.com/advisories/46950
http://www.securityfocus.com/bid/50754
http://www.ubuntu.com/usn/USN-1270-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/71430