ubuntu Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/ubuntu/ Sun, 26 Feb 2023 09:11:43 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png ubuntu Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/ubuntu/ 32 32 CVE-2008-6792 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6792/ Sun, 26 Feb 2023 09:11:43 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6792/ system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by “Users and Groups” in GNOME System Tools, hashes account passwords with 3DES and consequently limits effective password lengths to eight characters, which makes it easier for context-dependent attackers to successfully conduct brute-force password attacks.

The post CVE-2008-6792 appeared first on CVE Vulnerability.

]]> system-tools-backends before 2.6.0-1ubuntu1.1 in Ubuntu 8.10, as used by “Users and Groups” in GNOME System Tools, hashes account passwords with 3DES and consequently limits effective password lengths to eight characters, which makes it easier for context-dependent attackers to successfully conduct brute-force password attacks.

The post CVE-2008-6792 appeared first on CVE Vulnerability.

]]> CVE-2019-15795 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-15795/ Sun, 26 Feb 2023 06:31:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-15795/ python-apt only checks the MD5 sums of downloaded files in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py in version 1.9.0ubuntu1 and earlier. This allows a man-in-the-middle attack which could potentially be used to install altered packages and has been fixed in versions 1.9.0ubuntu1.2, 1.6.5ubuntu0.1, 1.1.0~beta1ubuntu0.16.04.7, 0.9.3.5ubuntu3+esm2, and 0.8.3ubuntu7.5.

The post CVE-2019-15795 appeared first on CVE Vulnerability.

]]> python-apt only checks the MD5 sums of downloaded files in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py in version 1.9.0ubuntu1 and earlier. This allows a man-in-the-middle attack which could potentially be used to install altered packages and has been fixed in versions 1.9.0ubuntu1.2, 1.6.5ubuntu0.1, 1.1.0~beta1ubuntu0.16.04.7, 0.9.3.5ubuntu3+esm2, and 0.8.3ubuntu7.5.

The post CVE-2019-15795 appeared first on CVE Vulnerability.

]]> CVE-2019-15796 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-15796/ Sun, 26 Feb 2023 06:31:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-15796/ Python-apt doesn’t check if hashes are signed in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py or in `_fetch_archives()` of apt/cache.py in version 1.9.3ubuntu2 and earlier. This allows downloads from unsigned repositories which shouldn’t be allowed and has been fixed in verisions 1.9.5, 1.9.0ubuntu1.2, 1.6.5ubuntu0.1, 1.1.0~beta1ubuntu0.16.04.7, 0.9.3.5ubuntu3+esm2, and 0.8.3ubuntu7.5.

The post CVE-2019-15796 appeared first on CVE Vulnerability.

]]> Python-apt doesn’t check if hashes are signed in `Version.fetch_binary()` and `Version.fetch_source()` of apt/package.py or in `_fetch_archives()` of apt/cache.py in version 1.9.3ubuntu2 and earlier. This allows downloads from unsigned repositories which shouldn’t be allowed and has been fixed in verisions 1.9.5, 1.9.0ubuntu1.2, 1.6.5ubuntu0.1, 1.1.0~beta1ubuntu0.16.04.7, 0.9.3.5ubuntu3+esm2, and 0.8.3ubuntu7.5.

The post CVE-2019-15796 appeared first on CVE Vulnerability.

]]>