Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2009-1358

Published: 21/04/2009 Updated: 08/01/2020
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Advanced Package Tool

Vulnerability Summary

apt-get in apt prior to 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote malicious users to trick apt into installing malicious repositories.

Vulnerable Product Search on Vulmon Subscribe to Product

debian advanced package tool 0.7.21

debian advanced package tool 0.7.19

debian advanced package tool 0.7.16

debian advanced package tool 0.7.15

debian apt 0.7.9

debian apt 0.7.8

debian advanced package tool 0.7.2

debian advanced package tool 0.7.1

debian apt 0.6.46.1

debian apt 0.6.46

debian apt 0.6.45

debian apt 0.6.43.2

debian apt 0.6.43.1

debian apt 0.6.40.1

debian apt 0.6.40

debian apt 0.6.33

debian apt 0.6.32

debian apt 0.6.27

debian apt 0.6.20

debian apt 0.6.19

debian apt 0.6.11

debian apt 0.6.10

debian apt 0.6.3

debian apt 0.6.2

debian apt 0.5.30

debian apt 0.5.29

debian apt 0.5.22

debian apt 0.5.21

debian apt 0.5.14

debian apt 0.5.13

debian apt 0.5.6

debian apt 0.5.5.1

debian apt 0.3.18

debian apt 0.3.17

debian apt 0.3.9

debian apt 0.3.7

debian apt 0.1.9

debian apt 0.1.7

debian apt 0.1.6

debian apt 0.0.15-0.2bo

debian apt 0.0.15-0.1bo

debian apt 0.0.10

debian apt 0.0.9

debian apt 0.0.1

debian advanced package tool 0.7.18

debian advanced package tool 0.7.17

debian advanced package tool 0.7.14

debian apt 0.7.7

debian apt 0.7.6

debian advanced package tool 0.7.0

debian apt 0.6.46.4-0.1

debian apt 0.6.44.2

debian apt 0.6.43

debian apt 0.6.42.3

debian apt 0.6.39

debian apt 0.6.38

debian apt 0.6.31

debian apt 0.6.30

debian apt 0.6.25

debian apt 0.6.18

debian apt 0.6.17

debian apt 0.6.9

debian apt 0.6.8

debian apt 0.6.1

debian apt 0.6.0

debian apt 0.5.28

debian apt 0.5.20

debian apt 0.5.19

debian apt 0.5.12

debian apt 0.5.11

debian apt 0.5.5

debian apt 0.5.4

debian apt 0.5.3

debian apt 0.3.16

debian apt 0.3.15

debian apt 0.3.6

debian apt 0.3.4

debian apt 0.1.5

debian apt 0.1.3

debian apt 0.0.15

debian apt 0.0.14

debian apt 0.0.8

debian apt 0.0.7

debian advanced package tool 0.7.20.2

debian advanced package tool 0.7.20.1

debian advanced package tool 0.7.11

debian advanced package tool 0.7.10

debian apt 0.7.3

debian advanced package tool 0.7.2-0.1

debian apt 0.6.46.3

debian apt 0.6.46.2

debian apt 0.6.44

debian apt 0.6.43.3

debian apt 0.6.42

debian apt 0.6.41

debian apt 0.6.36

debian apt 0.6.35

debian apt 0.6.34

debian apt 0.6.22

debian apt 0.6.21

debian apt 0.6.13

debian apt 0.6.12

debian apt 0.6.5

debian apt 0.6.4

debian apt 0.5.24

debian apt 0.5.23

debian apt 0.5.16

debian apt 0.5.15

debian apt 0.5.8

debian apt 0.5.7

debian apt 0.5.0

debian apt 0.3.19

debian apt 0.3.12

debian apt 0.3.11

debian apt 0.3.1

debian apt 0.3.0

debian apt 0.0.17-1

debian apt 0.0.16-1

debian apt 0.0.12

debian apt 0.0.11

debian apt 0.0.4

debian apt 0.0.3

debian apt 0.0.2

debian advanced package tool

debian advanced package tool 0.7.13

debian advanced package tool 0.7.12

debian apt 0.7.5

debian apt 0.7.4

debian apt 0.6.46.3-0.2

debian apt 0.6.46.3-0.1

debian apt 0.6.44.1-0.1

debian apt 0.6.44.1

debian apt 0.6.42.2

debian apt 0.6.42.1

debian apt 0.6.37

debian apt 0.6.29

debian apt 0.6.28

debian apt 0.6.24

debian apt 0.6.23

debian apt 0.6.16

debian apt 0.6.15

debian apt 0.6.14

debian apt 0.6.7

debian apt 0.6.6

debian apt 0.5.32

debian apt 0.5.31

debian apt 0.5.27

debian apt 0.5.26

debian apt 0.5.25

debian apt 0.5.18

debian apt 0.5.17

debian apt 0.5.10

debian apt 0.5.9

debian apt 0.5.2

debian apt 0.5.1

debian apt 0.3.14

debian apt 0.3.13

debian apt 0.3.3

debian apt 0.3.2

debian apt 0.1.1

debian apt 0.1

debian apt 0.0.13-bo1

debian apt 0.0.13

debian apt 0.0.6

debian apt 0.0.5

Vendor Advisories

Debian CVElist Bug Report Logs: ignores expiry of archive keys
Debian Bug report logs - #433091 ignores expiry of archive keys Package: apt; Maintainer for apt is APT Development Team <deity@listsdebianorg>; Source for apt is src:apt (PTS, buildd, popcon) Reported by: martin f krafft <madduck@debianorg> Date: Sat, 14 Jul 2007 11:30:01 UTC Severity: important Tags: security ...
Debian Security Advisories: DSA-1779-1 apt -- several vulnerabilities
Two vulnerabilities have been discovered in APT, the well-known dpkg frontend The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-1300 In time zones where daylight savings time occurs at midnight, the apt crondaily script fails, stopping new security updates from being applied automatically C ...

References

NVD-CWE-Otherhttps://bugs.launchpad.net/ubuntu/+source/apt/+bug/356012http://secunia.com/advisories/34829http://secunia.com/advisories/34832http://secunia.com/advisories/34874http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=433091http://www.debian.org/security/2009/dsa-1779http://www.securityfocus.com/bid/34630https://exchange.xforce.ibmcloud.com/vulnerabilities/50086https://usn.ubuntu.com/762-1/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=433091https://nvd.nist.govhttps://www.debian.org/security/./dsa-1779
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook