PT-2013-2843
CVE-2013-1051
·
تاريخ النشر
2013-03-21
·
تاريخ التحديث
2020-01-08
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
apt versions 0.8.16 through 0.9.7
Description
The issue is related to the handling of InRelease files, which can be exploited by man-in-the-middle attackers to modify packages before installation. This is possibly related to integrity checking and the use of third-party repositories.
Recommendations
For apt versions 0.8.16 through 0.9.7, consider restricting the use of third-party repositories to minimize the risk of exploitation. As a temporary workaround, ensure that package integrity is thoroughly checked before installation. At the moment, there is no information about a newer version that contains a fix for this issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾