CVE-2012-0955

CVE-2012-0955 describes a critical person-in-the-middle vulnerability in Canonical's software-properties, specifically due to insufficient TLS certificate validation in softwareproperties/ppa.py. This flaw allowed attackers to intercept and manipulate communications when software-properties was used with Python 2, or with Python 3 if a certificate bundle was not explicitly provided. With a CVSS score of 7.4 (High), the vulnerability is network-exploitable with high impact on confidentiality and integrity, though it requires high attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.