CVE-2011-4407
EPSS 0.13%Published: 5/14/2014Modified: 4/28/2026
Also known as:DEBIAN-CVE-2011-4407
Description
ppa.py in Software Properties before 0.81.13.3 does not validate the server certificate when downloading PPA GPG key fingerprints, which allows man-in-the-middle (MITM) attackers to spoof GPG keys for a package repository.
Affected packages (1)
- Debian/software-propertiesfrom 0, < 0.76.7debian2+nmu2