CVE-2011-4409: Canonical Ubuntu Linux

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

The Ubuntu One Client for Ubuntu 10.04 LTS, 11.04, 11.10, and 12.04 LTS does not properly validate SSL certificates, which allows remote attackers to spoof a server and modify or read sensitive information via a man-in-the-middle (MITM) attack.

Affected products

• Canonical Ubuntu Linux: version 10.04 only; version 11.04 only; version 11.10 only; version 12.04 only

Published 2012-06-16. Last modified 2026-06-16.