CVE-2011-4407

ppa.py in Software Properties before 0.81.13.3 does not validate the server certificate when downloading PPA GPG key fingerprints, which allows…

published May 14, 2014

CVSS
—
EPSS
1%
Percentile
49.4
In the wild
Unconfirmed
What it is

ppa.py in Software Properties before 0.81.13.3 does not validate the server certificate when downloading PPA GPG key fingerprints, which allows man-in-the-middle (MITM) attackers to spoof GPG keys for a package repository.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00632 · 49.4th percentile
Published
2014-05-14T00:00Z
EPSS history
Timeline
  • 14 MAY 00:00Z
    ppa.py in Software Properties before 0.81.13.3 does not validate the server certificate when downloading PPA GPG key fingerprints, which allows…
    cvelistv5