CVE-2014-0489

APT before 1.0.9, when the Acquire::GzipIndexes option is enabled, does not validate checksums, which allows remote attackers to execute arbitrary code via a crafted package...

CVE-2014-0489

APT before 1.0.9, when the Acquire::GzipIndexes option is enabled, does not validate checksums, which allows remote attackers to execute arbitrary code via a crafted package...

CVE-2014-0489: Improper Input Validation

APT before 1.0.9, when the Acquire::GzipIndexes option is enabled, does not validate checksums, which allows remote attackers to execute arbitrary code via a crafted package...

Ubuntu 14.04 LTS : APT vulnerabilities (USN-2348-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2348-1 advisory. It was discovered that APT did not re-verify downloaded files when the If-Modified-Since wasn't met. CVE-2014-0487 It was discovered that APT did not...

PT-2014-3655

Name of the Vulnerable Software and Affected Versions APT versions prior to 1.0.9 Description The issue allows remote attackers to execute arbitrary code via a crafted package when the Acquire::GzipIndexes option is enabled, due to a lack of checksum validation. Recommendations For versions prior...