Description (CNA)
The apt-add-repository tool in Ubuntu Software Properties 0.75.x before 0.75.10.3, 0.80.x before 0.80.9.2, 0.81.x before 0.81.13.5, 0.82.x before 0.82.7.3, and 0.92.x before 0.92.8 does not properly check PPA GPG keys imported from a keyserver, which allows remote attackers to install arbitrary package repository GPG keys via a man-in-the-middle (MITM) attack.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.ubuntu.com/usn/USN-1588-1
- http://www.securityfocus.com/bid/55736
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78990
- https://bugs.launchpad.net/ubuntu/+source/software-properties/+bug/1016643
ADP enrichment
No English description supplied.