Command injection

The apt-get download command in APT before 1.0.9 does not properly validate signatures for packages, which allows remote attackers to execute arbitrary code via a crafted package...

CVE-2014-0490

The apt-get download command in APT before 1.0.9 does not properly validate signatures for packages, which allows remote attackers to execute arbitrary code via a crafted package...

CVE-2014-0490: Improper Input Validation

The apt-get download command in APT before 1.0.9 does not properly validate signatures for packages, which allows remote attackers to execute arbitrary code via a crafted package...

PT-2014-3656

Name of the Vulnerable Software and Affected Versions APT versions prior to 1.0.9 Description The issue concerns the apt-get download command, which fails to properly validate signatures for packages. This allows remote attackers to execute arbitrary code via a crafted package. Recommendations Fo...