CVE-2011-4408

The Single Sign On Client (ubuntu-sso-client) for Ubuntu 11.04 and 11.10 does not properly validate SSL certificates when using HTTPS, which allows remote attackers to spoof a server and modify or read sensitive data via a man-in-the-middle (MITM) attack.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
canonicalCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
VendorProductVersion
canonicalubuntu_linux
11.04
canonicalubuntu_linux
11.10
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
ubuntu-sso-client
precise
not-affected
oneiric
Fixed 1.4.1-0ubuntu1.1
released
natty
Fixed 1.2.1-0ubuntu2.1
released
lucid
dne
hardy
dne
References
http://osvdb.org/82747
http://secunia.com/advisories/49448
http://www.securityfocus.com/bid/53829
http://www.ubuntu.com/usn/USN-1464-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/76112
http://osvdb.org/82747
http://secunia.com/advisories/49448
http://www.securityfocus.com/bid/53829
http://www.ubuntu.com/usn/USN-1464-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/76112