CVEvulnerability
CVE-2014-0488
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-11-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
APT before 1.0.9 does not "invalidate repository data" when moving from an unauthenticated to authenticated state, which allows remote attackers to have unspecified impact via crafted repository data.
Affected configurations
• debian advanced package tool 1.0.3
• debian advanced package tool 1.0.7
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/61275 secunia.com
- http://secunia.com/advisories/61286 secunia.com
- http://ubuntu.com/usn/usn-2348-1 Patch, Vendor Advisory
- http://www.debian.org/security/2014/dsa-3025 Vendor Advisory
- http://secunia.com/advisories/61275 secunia.com
- http://secunia.com/advisories/61286 secunia.com
- http://ubuntu.com/usn/usn-2348-1 Patch, Vendor Advisory
- http://www.debian.org/security/2014/dsa-3025 Vendor Advisory