CVE-2011-4092: Ubuntu Developers Obby

Medium severity, CVSS 5.8. EPSS: 0.8% chance of exploitation in the next 30 days.

obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate.

Affected products

Published 2014-02-10. Last modified 2026-06-16.