What’s Vulnerable › Vulnerabilities

CVE-2011-4409

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-06-16 · updated 2026-06-16
• Weakness: CWE-20

Description

The Ubuntu One Client for Ubuntu 10.04 LTS, 11.04, 11.10, and 12.04 LTS does not properly validate SSL certificates, which allows remote attackers to spoof a server and modify or read sensitive information via a man-in-the-middle (MITM) attack.

Affected products

• Canonical Ubuntu Linux: 10.04, 11.04, 11.10, 12.04

References

• http://secunia.com/advisories/49442
• http://ubuntu.com/usn/usn-1465-1
• http://ubuntu.com/usn/usn-1465-2
• http://ubuntu.com/usn/usn-1465-3
• http://www.osvdb.org/82748
• http://www.securityfocus.com/bid/53828
• https://exchange.xforce.ibmcloud.com/vulnerabilities/76113
• http://secunia.com/advisories/49442
• http://ubuntu.com/usn/usn-1465-1
• http://ubuntu.com/usn/usn-1465-2
• http://ubuntu.com/usn/usn-1465-3
• http://www.osvdb.org/82748

Get alerted when CVE-2011-4409 or the next vulnerability affects your stack