CVE-2012-0063 Insecure plugin update mechanism in tucan through 0.3.10 could allow remote attackers to perform man-in-the-middle attacks and execute arbitrary code ith the permissions of the user running tucan.
HighCVSS 8.1
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Insecure plugin update mechanism in tucan through 0.3.10 could allow remote attackers to perform man-in-the-middle attacks and execute arbitrary code ith the permissions of the user running tucan.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tucan | = through 0.3.10 | No fix listed |
| tucaneando tucan | <= 0.3.10 | No fix listed |
References
- [oss-security] 20120118 Re: CVE request: tucan insecure plugin update mechanism mailing-list third-party-advisory
- security-tracker.debian.org third-party-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- access.redhat.com broken-link third-party-advisory