Lucene search
HistoryJun 17, 2014 - 2:55 p.m.
CVE-2014-0478
cve-2014-0478
apt
security vulnerability
validation
source packages
man-in-the-middle
nvd
6.2 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:N/I:P/A:P
0.001 Low
EPSS
Percentile
44.1%
APT before 1.0.4 does not properly validate source packages, which allows man-in-the-middle attackers to download and install Trojan horse packages by removing the Release signature.
Affected configurations
Node
debianadvanced_package_toolRange≤1.0.3
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian:advanced_package_tool | debian advanced package tool | le | 1.0.3 |
Related
prion
prion
Design/Logic Flaw
2014-06-17 14:55:00
ubuntucve
ubuntucve
CVE-2014-0478
2014-06-12 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2958-1)
2014-06-11 00:00:00
Debian Security Advisory DSA 2958-1 (apt - security update)
2014-06-12 00:00:00
Ubuntu: Security Advisory (USN-2246-1)
2014-06-23 00:00:00
nessus
nessus
Ubuntu 14.04 LTS : APT vulnerability (USN-2246-1)
2014-06-18 00:00:00
Debian DSA-2958-1 : apt - security update
2014-06-13 00:00:00
nvd
nvd
CVE-2014-0478
2014-06-17 14:55:06
debiancve
debiancve
CVE-2014-0478
2014-06-17 14:55:06
debian
debian
[SECURITY] [DSA 2958-1] apt security update
2014-06-12 18:09:29
apt security update
2014-06-12 18:15:47
apt security update
2014-06-12 18:15:29
securityvulns
securityvulns
apt insufficient certificate validation
2014-06-13 00:00:00
[SECURITY] [DSA 2958-1] apt security update
2014-06-13 00:00:00
osv
osv
apt - security update
2014-06-12 00:00:00
apt - security update
2014-06-12 00:00:00
ubuntu
ubuntu
APT vulnerability
2014-06-17 00:00:00
cvelist
cvelist
CVE-2014-0478
2014-06-17 14:00:00
6.2 Medium
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:N/I:P/A:P
0.001 Low
EPSS
Percentile
44.1%
Related for CVE-2014-0478