CVEvulnerability

CVE-2014-0487

7.5 HIGH Published 2014-11-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-11-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

APT before 1.0.9 does not verify downloaded files if they have been modified as indicated using the If-Modified-Since header, which has unspecified impact and attack vectors.

Affected configurations

• debian advanced package tool 1.0.3 • debian advanced package tool 1.0.7

References