CVE-2013-1051 - apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify packages before installation via unknown vectors, possibly related to integrity checking and the use of third-party repositories

Back Back to CVE browser

MEDIUM

apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify packages before installation via unknown vectors, possibly related to integrity checking and the use of third-party repositories

Published Mar 21, 2013

4.3

MEDIUM

CVSS 2.0

EPSS 1.34%

Description

apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify packages before installation via unknown vectors, possibly related to integrity checking and the use of third-party repositories.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (3)

http://osvdb.org/91428
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/52633
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.ubuntu.com/usn/USN-1762-1
vendor-advisoryx_refsource_UBUNTU

Link	Providers	Tags
http://osvdb.org/91428		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/52633		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.ubuntu.com/usn/USN-1762-1		vendor-advisoryx_refsource_UBUNTU