Published: 29/11/2011 Updated: 29/08/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an "insecure connection" for queries to the OpenPrinting database, which allows remote malicious users to execute arbitrary code via a man-in-the-middle (MITM) attack that modifies packages or repositories.

Vulnerable Product	Search on Vulmon	Subscribe to Product
canonical ubuntu linux 11.10
canonical ubuntu linux 11.04

An attacker could trick system-config-printer into installing altered packages and repositories ...

Debian Bug report logs - #651204 CVE-2011-4405 Package: system-config-printer; Maintainer for system-config-printer is Debian GNOME Maintainers <pkg-gnome-maintainers@listsaliothdebianorg>; Source for system-config-printer is src:system-config-printer (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <muehlenhoff@u ...

CWE-20 http://www.ubuntu.com/usn/USN-1265-1 http://osvdb.org/77214 http://secunia.com/advisories/46909 http://www.securityfocus.com/bid/50721 https://exchange.xforce.ibmcloud.com/vulnerabilities/71394 https://usn.ubuntu.com/1265-1/https://nvd.nist.gov

CVE-2011-4405

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect