CVE-2010-0834 | BDVDB-2026-42829 Detail

Description#

The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 and before 5.0.0ubuntu20.10.04.2 on Ubuntu 10.04 LTS, as shipped on Dell Latitude 2110 netbooks, does not require authentication for package installation, which allows remote archive servers and man-in-the-middle attackers to execute arbitrary code via a crafted package.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/42280
http://secunia.com/advisories/40889
http://www.vupen.com/english/advisories/2010/2015
http://www.ubuntu.com/usn/usn-968-1

Exploit#

No public exploit known

History#

Version 12010-08-09Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.