CVE-2011-4408

The Single Sign On Client (ubuntu-sso-client) for Ubuntu 11.04 and 11.10 does not properly validate SSL certificates when using HTTPS, which allows remote attackers to spoof a server and modify or read sensitive data via a man-in-the-middle (MITM) attack.

🔗 References (10)

• security@ubuntuhttp://osvdb.org/82747
• security@ubuntuhttp://secunia.com/advisories/49448
• security@ubuntuhttp://www.securityfocus.com/bid/53829
• security@ubuntuhttp://www.ubuntu.com/usn/USN-1464-1
• security@ubuntuhttps://exchange.xforce.ibmcloud.com/vulnerabilities/76112
• af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/82747
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/49448
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/53829
• af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/USN-1464-1
• af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/76112