CVE-2014-0488

UNKNOWN

APT before 1

Published Nov 3, 2014

Modified 1 years ago

Details

APT before 1.0.9 does not "invalidate repository data" when moving from an unauthenticated to authenticated state, which allows remote attackers to have unspecified impact via crafted repository data.

References

ADVISORY

http://secunia.com/advisories/61275

ADVISORY

http://secunia.com/advisories/61286

ADVISORY

http://ubuntu.com/usn/usn-2348-1

ADVISORY

http://www.debian.org/security/2014/dsa-3025

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2014-0488

CVSS Analysis

CVSS v2.0

6.8

Exploitability

Access Vector

NetworkAV:N

Access Complexity

MediumAC:M

Authentication

NoneAu:N

Impact

Confidentiality

PartialC:P

Integrity

PartialI:P

Availability

PartialA:P

6.8/AV:N/AC:M/Au:N/C:P/I:P/A:P

Ecosystems

Timeline

PublishedNov 3, 2014

ModifiedAug 6, 2024