Design/Logic Flaw

APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote attackers to install Trojan horse packages via a man-in-the-middle MITM attack...

PT-2012-4830

Name of the Vulnerable Software and Affected Versions APT versions 0.7.x through 0.7.24 APT versions 0.8.x through 0.8.15 Description The issue allows remote attackers to install Trojan horse packages via a man-in-the-middle MITM attack, due to reliance on GnuPG argument order and lack of checks...

PT-2012-2971

Name of the Vulnerable Software and Affected Versions APT versions 0.7.x through 0.7.24 APT versions 0.8.x through 0.8.15 Description The issue allows remote attackers to install altered packages via a man-in-the-middle MITM attack, because it relies on GnuPG argument order and does not check GPG...

CVE-2012-3587: Improper Input Validation

APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote attackers to install Trojan horse packages via a man-in-the-middle MITM attack...