Advanced Package Tool@1.0.5 Security Vulnerabilities and Issues — Advanced Package Tool@1.0.5 CVE List

Lucene search

DebianAdvanced Package Tool1.0.5

2 matches found

CVE•added 2014/11/03 10:55 p.m.•55 views

CVE-2014-0489

APT before 1.0.9, when the Acquire::GzipIndexes option is enabled, does not validate checksums, which allows remote attackers to execute arbitrary code via a crafted package.

7.5CVSS7.5AI score0.00688EPSS

CVE•added 2014/11/03 10:55 p.m.•54 views

CVE-2014-0490

The apt-get download command in APT before 1.0.9 does not properly validate signatures for packages, which allows remote attackers to execute arbitrary code via a crafted package.

7.5CVSS7.6AI score0.00688EPSS