CVE-2011-3152 Security feature bypass in n/a
Man-in-the-middle attackers can bypass GPG signature verification in Ubuntu Update Manager to overwrite files or bypass authentication during upgrades.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2011-3152?
CVE-2011-3152 is a medium-severity vulnerability in Canonical Ubuntu Linux, published on 27 Apr 2014. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
DistUpgrade/DistUpgradeFetcherCore.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134.11.1, 1:0.142.x before 1:0.142.23.1, 1:0.150.x before 1:0.150.5.1, and 1:0.152.x before 1:0.152.25.5 on Ubuntu 8.04 through 11.10 does not verify the GPG signature before extracting an upgrade tarball, which allows man-in-the-middle attackers to (1) create or overwrite arbitrary files via a directory traversal attack using a crafted tar file, or (2) bypass authentication via a crafted meta-release file.
Weakness: CWE-310
Which versions are affected by CVE-2011-3152?
It affects 2 products.
Products include Canonical Ubuntu Linux, Canonical Update-Manager.
How do I fix CVE-2011-3152?
No fix has been published for CVE-2011-3152 yet. Limit exposure of the affected software until one is available.
Is CVE-2011-3152 being exploited?
There is no known exploitation of CVE-2011-3152 in the wild and no public exploit code.
Other vulnerabilities in Canonical Ubuntu Linux
Sources
Also known as GHSA-prh3-xfqc-rc2x.