Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

debian advanced package tool 0.7.20.2 vulnerabilities and exploits

(subscribe to this query)
2.6
CVSSv2
CVE-2012-0954
APT 0.7.x prior to 0.7.25 and 0.8.x prior to 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote malicious users to install altered packages via a man-in-the-middle (MITM) attack. NO...
Debian Advanced Package Tool 0.7.24Debian Advanced Package Tool 0.7.23.1Debian Advanced Package Tool 0.7.23Debian Advanced Package Tool 0.7.22.2Debian Advanced Package Tool 0.7.17Debian Advanced Package Tool 0.7.16Debian Advanced Package Tool 0.7.15Debian Advanced Package Tool 0.8.15.8Debian Advanced Package Tool 0.8.15.7Debian Advanced Package Tool 0.8.15.6Debian Advanced Package Tool 0.8.15Debian Advanced Package Tool 0.8.11.2Debian Advanced Package Tool 0.8.11.1Debian Advanced Package Tool 0.8.11Debian Advanced Package Tool 0.8.10.3Debian Advanced Package Tool 0.7.22.1Debian Advanced Package Tool 0.7.21Debian Advanced Package Tool 0.7.18Debian Advanced Package Tool 0.7.14Debian Advanced Package Tool 0.7.1Debian Advanced Package Tool 0.8.15.10Debian Advanced Package Tool 0.8.11.5
2.6
CVSSv2
CVE-2012-3587
APT 0.7.x prior to 0.7.25 and 0.8.x prior to 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote malicious users to install Trojan horse packages via a man-in-the-middle (MITM) attac...
Debian Advanced Package Tool 0.7.21Debian Advanced Package Tool 0.7.20.2Debian Advanced Package Tool 0.7.20.1Debian Advanced Package Tool 0.7.20Debian Advanced Package Tool 0.7.15Debian Advanced Package Tool 0.7.14Debian Advanced Package Tool 0.7.13Debian Advanced Package Tool 0.8.15.1Debian Advanced Package Tool 0.8.15Debian Advanced Package Tool 0.8.14.1Debian Advanced Package Tool 0.8.14Debian Advanced Package Tool 0.8.10Debian Advanced Package Tool 0.8.1Debian Advanced Package Tool 0.8.0Debian Advanced Package Tool 0.7.23.1Debian Advanced Package Tool 0.7.22.2Debian Advanced Package Tool 0.7.22Debian Advanced Package Tool 0.7.2-0.1Debian Advanced Package Tool 0.7.19Debian Advanced Package Tool 0.7.16Debian Advanced Package Tool 0.7.12Debian Advanced Package Tool 0.7.10
10
CVSSv2
CVE-2009-1300
apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight.
Debian Advanced Package Tool 0.7.20
10
CVSSv2
CVE-2009-1358
apt-get in apt prior to 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote malicious users to trick apt into installing mali...
Debian Advanced Package Tool 0.7.21Debian Advanced Package Tool 0.7.19Debian Advanced Package Tool 0.7.16Debian Advanced Package Tool 0.7.15Debian Apt 0.7.9Debian Apt 0.7.8Debian Advanced Package Tool 0.7.2Debian Advanced Package Tool 0.7.1Debian Apt 0.6.46.1Debian Apt 0.6.46Debian Apt 0.6.45Debian Apt 0.6.43.2Debian Apt 0.6.43.1Debian Apt 0.6.40.1Debian Apt 0.6.40Debian Apt 0.6.33Debian Apt 0.6.32Debian Apt 0.6.27Debian Apt 0.6.20Debian Apt 0.6.19Debian Apt 0.6.11Debian Apt 0.6.10
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
hard-codedCVE-2024-27202NULL pointer dereferenceCVE-2024-28075CVE-2024-33608CVE-2024-28889CVE-2024-34572template injectionCVE-2024-34351
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook