APT 0.7.x prior to 0.7.25 and 0.8.x prior to 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote malicious users to install altered packages via a man-in-the-middle (MITM) attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3587.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
debian advanced package tool 0.7.24 |
||
debian advanced package tool 0.7.23.1 |
||
debian advanced package tool 0.7.23 |
||
debian advanced package tool 0.7.22.2 |
||
debian advanced package tool 0.7.17 |
||
debian advanced package tool 0.7.16 |
||
debian advanced package tool 0.7.15 |
||
debian advanced package tool 0.8.15.8 |
||
debian advanced package tool 0.8.15.7 |
||
debian advanced package tool 0.8.15.6 |
||
debian advanced package tool 0.8.15 |
||
debian advanced package tool 0.8.11.2 |
||
debian advanced package tool 0.8.11.1 |
||
debian advanced package tool 0.8.11 |
||
debian advanced package tool 0.8.10.3 |
||
debian advanced package tool 0.7.22.1 |
||
debian advanced package tool 0.7.21 |
||
debian advanced package tool 0.7.18 |
||
debian advanced package tool 0.7.14 |
||
debian advanced package tool 0.7.1 |
||
debian advanced package tool 0.8.15.10 |
||
debian advanced package tool 0.8.11.5 |
||
debian advanced package tool 0.8.11.3 |
||
debian advanced package tool 0.8.10.2 |
||
debian advanced package tool 0.8.10 |
||
debian advanced package tool 0.7.20.1 |
||
debian advanced package tool 0.7.20 |
||
debian advanced package tool 0.7.2-0.1 |
||
debian advanced package tool 0.7.2 |
||
debian advanced package tool 0.7.13 |
||
debian advanced package tool 0.7.12 |
||
debian advanced package tool 0.7.11 |
||
debian advanced package tool 0.7.10 |
||
debian advanced package tool 0.8.14 |
||
debian advanced package tool 0.8.13.2 |
||
debian advanced package tool 0.8.13.1 |
||
debian advanced package tool 0.8.13 |
||
debian advanced package tool 0.8.0 |
||
debian advanced package tool 0.7.22 |
||
debian advanced package tool 0.7.20.2 |
||
debian advanced package tool 0.7.19 |
||
debian advanced package tool 0.7.0 |
||
debian advanced package tool 0.8.15.9 |
||
debian advanced package tool 0.8.15.1 |
||
debian advanced package tool 0.8.14.1 |
||
debian advanced package tool 0.8.12 |
||
debian advanced package tool 0.8.11.4 |
||
debian advanced package tool 0.8.10.1 |
||
debian advanced package tool 0.8.1 |
Vulmon