CVE Database
/

CVE-2010-0834

Back to search

CVE-2010-0834

Published: Aug 9, 2010

Modified: Sep 16, 2024

PUBLISHED

Description

The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 and before 5.0.0ubuntu20.10.04.2 on Ubuntu 10.04 LTS, as shipped on Dell Latitude 2110 netbooks, does not require authentication for package installation, which allows remote archive servers and man-in-the-middle attackers to execute arbitrary code via a crafted package.

VendorProductVersions

n/a

n/a

affected
n/a

References

42280
vdb-entry
x_refsource_BID
40889
third-party-advisory
x_refsource_SECUNIA
ADV-2010-2015
vdb-entry
x_refsource_VUPEN
USN-968-1
vendor-advisory
x_refsource_UBUNTU

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now
CVE-2010-0834 - Security Vulnerability | QwikSec