VULNERABILITY INTELLIGENCE
CVE-2012-0962
CVSS score4.3 MEDIUM
EPSS probability1.80%
CISA KEVNot currently listed
Published2012-12-26
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys from a keyserver, which allows remote attackers to install arbitrary package repository GPG keys via a man-in-the-middle (MITM) attack.
Primary references
- security@ubuntu.com — Vendor Advisory
- security@ubuntu.com
- security@ubuntu.com — Patch
- security@ubuntu.com — Patch
- security@ubuntu.com
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Patch
- af854a3a-2127-422b-91ae-364da2661108 — Patch
- af854a3a-2127-422b-91ae-364da2661108