7.5
CVSSv2

CVE-2005-1854

Published: 05/08/2005 Updated: 11/07/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Unknown vulnerability in apt-cacher in Debian 3.1, related to "missing input sanitising," allows remote malicious users to execute arbitrary commands on the caching server.

Vulnerable Product Search on Vulmon Subscribe to Product

debian apt-cacher 0.9.9

debian apt-cacher 0.9.4

Vendor Advisories

Eduard Bloch discovered a bug in apt-cacher, a caching system for Debian package and source files, that could allow remote attackers to execute arbitrary commands on the caching host as user www-data The old stable distribution (woody) does not contain this package For the stable distribution (sarge) this problem has been fixed in version 094sa ...