Path Traversal in Sebastian Heinlein Aptdaemon
CVE-2011-0725
Absolute path traversal vulnerability in the org.debian.apt.UpdateCachePartially method in worker.py in Aptdaemon 0.40 in Ubuntu 10.10 and 11.04 allows local users to read arbitrary files via a full pathname in the sources_list argument, related to the D-Bus interface.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.004 (31.8th percentile) — read the EPSS interpretation.
Affected products
- Sebastian_heinlein Aptdaemon — versions 0.40
- Canonical Ubuntu_linux — versions 10.10, 11.04
- N/a — versions n/a
Weakness classification (CWE)
References
- security@ubuntu.com (vdb-entry, x_refsource_BID)
- security@ubuntu.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- security@ubuntu.com (vdb-entry, x_refsource_XF)
- security@ubuntu.com (x_refsource_UBUNTU, vendor-advisory, Vendor Advisory)
- security@ubuntu.com (vdb-entry, x_refsource_SECTRACK)
- security@ubuntu.com (x_refsource_CONFIRM)