CVE-2011-3634 methods/https.cc in apt before 0.8.11 accepts connections when the certificate host name fails validation and Verify-Host is enabled, which allows man-in-the-middle attackers to obtain repository cred...
LowCVSS 2.6
EPSS 0.82%
- Published
- Updated
- Exploit status
- No public exploit known
Description
methods/https.cc in apt before 0.8.11 accepts connections when the certificate host name fails validation and Verify-Host is enabled, which allows man-in-the-middle attackers to obtain repository credentials via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/apt(Debian:12) | < 0.8.11 | 0.8.11 |
| debian/apt(Debian:13) | < 0.8.11 | 0.8.11 |
| debian/apt(Debian:14) | < 0.8.11 | 0.8.11 |
| debian advanced package tool | <= 0.8.10.3 | No fix listed |
| debian advanced package tool | = 0.8.0 | No fix listed |
| debian advanced package tool | = 0.8.0-pre1 | No fix listed |
| debian advanced package tool | = 0.8.0-pre2 | No fix listed |
| debian advanced package tool | = 0.8.1 | No fix listed |
| debian advanced package tool | = 0.8.10 | No fix listed |
| debian advanced package tool | = 0.8.10.1 | No fix listed |
| debian advanced package tool | = 0.8.10.2 | No fix listed |
| Canonical Ubuntu Linux | = 8.04 | No fix listed |
| Canonical Ubuntu Linux | = 10.04 | No fix listed |
| Canonical Ubuntu Linux | = 10.10 | No fix listed |
| Canonical Ubuntu Linux | = 11.04 | No fix listed |
References
- Debian Security Tracker CVE-2011-3634 vendor-advisory
- people.canonical.com
- USN-1283-1 vendor-advisory
- alioth.debian.org
- bugs.launchpad.net