CVE-2009-1358

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories...

CVE-2009-1358

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories...

CVE-2009-1358

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories...

CVE-2009-1358

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories...

CVE-2009-1358

CVE-2009-1358 affects the Debian/Red Hat apt client: apt-get before 0.7.21 fails to validate the error code from gpgv, causing an otherwise revoked/expired OpenPGP key to be treated as valid and potentially allow installation of malicious repositories. Affected software is the apt package manager...

[USN-762-1] APT vulnerabilities

=========================================================== Ubuntu Security Notice USN-762-1 April 20, 2009 apt vulnerabilities CVE-2009-1300, https://launchpad.net/bugs/356012 =========================================================== A security issue affects the following Ubuntu releases: Ubun...

USN-762-1: APT vulnerabilities

Alexandre Martani discovered that the APT daily cron script did not check the return code of the date command. If a machine is configured for automatic updates and is in a time zone where DST occurs at midnight, under certain circumstances automatic updates might not be applied and could become...

DEBIAN-CVE-2009-1300

apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight...

CVE-2009-1300

apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight...

CVE-2009-1300

apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight...

Command injection

apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight...

CVE-2009-1300

apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight...

CVE-2009-1300

apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight...

CVE-2009-1300

apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight...

CVE-2009-1300

CVE-2009-1300 affects the apt package (dpkg front-end) where the cron.daily script can fail to load security updates in time zones with DST at midnight because the date command’s return code is not checked. Connected advisories confirm the issue across multiple distributions (Debian etch, lenny; ...

SystemTap模块加载本地竞争条件漏洞

BUGTRAQ ID: 34260 CVECAN ID: CVE-2009-0784 SystemTap是一款Linux内核诊断工具，允许从运行中的Linux内核快速和安全地获取信息。 systemtap在检查和加载某些内核模块时存在竞争条件。漏洞起因是checkpath检查了路径（modulerealpath变量），但之后没有使用该路径打开文件。因此，用户可以要求stap加载当前目录中符号链接到有效内核对象的内核模块，然后迅速用恶意内核对象替换符号链接所指向的对象，导致执行本应受限制的目录之外的内核对象。...

Ubuntu: Security Advisory (USN-572-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for apt-listchanges vulnerability USN-572-1

Ubuntu Update for Linux kernel vulnerabilities USN-572-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5721.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for apt-listchanges vulnerability USN-572-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

[SECURITY] [DSA 1747-1] New glib2.0 packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1747-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 20, 2009 http://www.debian.org/security/faq -...

Fedora Update for fedora-package-config-apt FEDORA-2008-8073

Check for the Version of fedora-package-config-apt OpenVAS Vulnerability Test Fedora Update for fedora-package-config-apt FEDORA-2008-8073 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...