CVE-2011-0725 in Aptdaemon

الملخص

بحسب MITRE

Absolute path traversal vulnerability in the org.debian.apt.UpdateCachePartially method in worker.py in Aptdaemon 0.40 in Ubuntu 10.10 and 11.04 allows local users to read arbitrary files via a full pathname in the sources_list argument, related to the D-Bus interface.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• حجز: 01/02/2011
• إفشاء: 23/02/2011
• الاعتدال: تمت الموافقة
• إدخال: VDB-56594
• CPE: جاهز
• CWE: CWE-22 (مؤكد)
• CVSS: 4.9 (NVD)
• EPSS: 0.00392
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-0725
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-0725
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-0725/