CVEvulnerability
CVE-2009-1300
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-04-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight.
Affected configurations
• debian advanced package tool 0.7.20
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=523213 bugs.debian.org
- http://secunia.com/advisories/34829 secunia.com
- http://secunia.com/advisories/34832 secunia.com
- http://secunia.com/advisories/34874 secunia.com
- http://www.debian.org/security/2009/dsa-1779 www.debian.org
- http://www.openwall.com/lists/oss-security/2009/04/08/11 www.openwall.com
- https://bugs.launchpad.net/ubuntu/+source/coreutils/+bug/354793 bugs.launchpad.net
- https://usn.ubuntu.com/762-1/ usn.ubuntu.com
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=523213 bugs.debian.org
- http://secunia.com/advisories/34829 secunia.com
- http://secunia.com/advisories/34832 secunia.com
- http://secunia.com/advisories/34874 secunia.com
- http://www.debian.org/security/2009/dsa-1779 www.debian.org
- http://www.openwall.com/lists/oss-security/2009/04/08/11 www.openwall.com
- https://bugs.launchpad.net/ubuntu/+source/coreutils/+bug/354793 bugs.launchpad.net
- https://usn.ubuntu.com/762-1/ usn.ubuntu.com