|
|
| |
|
| |
system-config-printer: man-in-the-middle package installation
| Package(s): | system-config-printer |
CVE #(s): | CVE-2011-4405
|
| Created: | November 17, 2011 |
Updated: | November 23, 2011 |
| Description: |
From the Ubuntu advisory:
Marc Deslauriers discovered that system-config-printer's cupshelpers
scripts used by the Ubuntu automatic printer driver download service
queried the OpenPrinting database using an insecure connection. If a remote
attacker were able to perform a man-in-the-middle attack, this flaw could
be exploited to install altered packages and repositories. |
| Alerts: |
|
( Log in to post comments)
|
|
|