2.6

CVE-2012-3587

APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote attackers to install Trojan horse packages via a man-in-the-middle (MITM) attack.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Debian ≫ Advanced Package Tool Version 0.7.0
Debian ≫ Advanced Package Tool Version 0.7.1
Debian ≫ Advanced Package Tool Version 0.7.2
Debian ≫ Advanced Package Tool Version 0.7.2-0.1
Debian ≫ Advanced Package Tool Version 0.7.10
Debian ≫ Advanced Package Tool Version 0.7.11
Debian ≫ Advanced Package Tool Version 0.7.12
Debian ≫ Advanced Package Tool Version 0.7.13
Debian ≫ Advanced Package Tool Version 0.7.14
Debian ≫ Advanced Package Tool Version 0.7.15
Debian ≫ Advanced Package Tool Version 0.7.15 Update exp1
Debian ≫ Advanced Package Tool Version 0.7.15 Update exp2
Debian ≫ Advanced Package Tool Version 0.7.15 Update exp3
Debian ≫ Advanced Package Tool Version 0.7.16
Debian ≫ Advanced Package Tool Version 0.7.17
Debian ≫ Advanced Package Tool Version 0.7.17 Update exp1
Debian ≫ Advanced Package Tool Version 0.7.17 Update exp2
Debian ≫ Advanced Package Tool Version 0.7.17 Update exp3
Debian ≫ Advanced Package Tool Version 0.7.17 Update exp4
Debian ≫ Advanced Package Tool Version 0.7.18
Debian ≫ Advanced Package Tool Version 0.7.19
Debian ≫ Advanced Package Tool Version 0.7.20
Debian ≫ Advanced Package Tool Version 0.7.20.1
Debian ≫ Advanced Package Tool Version 0.7.20.2
Debian ≫ Advanced Package Tool Version 0.7.21
Debian ≫ Advanced Package Tool Version 0.7.22
Debian ≫ Advanced Package Tool Version 0.7.22.1
Debian ≫ Advanced Package Tool Version 0.7.22.2
Debian ≫ Advanced Package Tool Version 0.7.23
Debian ≫ Advanced Package Tool Version 0.7.23.1
Debian ≫ Advanced Package Tool Version 0.7.24
Debian ≫ Advanced Package Tool Version 0.8.0
Debian ≫ Advanced Package Tool Version 0.8.0 Update pre1
Debian ≫ Advanced Package Tool Version 0.8.0 Update pre2
Debian ≫ Advanced Package Tool Version 0.8.1
Debian ≫ Advanced Package Tool Version 0.8.10
Debian ≫ Advanced Package Tool Version 0.8.10.1
Debian ≫ Advanced Package Tool Version 0.8.10.2
Debian ≫ Advanced Package Tool Version 0.8.10.3
Debian ≫ Advanced Package Tool Version 0.8.11
Debian ≫ Advanced Package Tool Version 0.8.11.1
Debian ≫ Advanced Package Tool Version 0.8.11.2
Debian ≫ Advanced Package Tool Version 0.8.11.3
Debian ≫ Advanced Package Tool Version 0.8.11.4
Debian ≫ Advanced Package Tool Version 0.8.11.5
Debian ≫ Advanced Package Tool Version 0.8.12
Debian ≫ Advanced Package Tool Version 0.8.13
Debian ≫ Advanced Package Tool Version 0.8.13.1
Debian ≫ Advanced Package Tool Version 0.8.13.2
Debian ≫ Advanced Package Tool Version 0.8.14
Debian ≫ Advanced Package Tool Version 0.8.14.1
Debian ≫ Advanced Package Tool Version 0.8.15
Debian ≫ Advanced Package Tool Version 0.8.15 Update exp1
Debian ≫ Advanced Package Tool Version 0.8.15 Update exp2
Debian ≫ Advanced Package Tool Version 0.8.15 Update exp3
Debian ≫ Advanced Package Tool Version 0.8.15.1
Debian ≫ Advanced Package Tool Version 0.8.15.6
Debian ≫ Advanced Package Tool Version 0.8.15.7
Debian ≫ Advanced Package Tool Version 0.8.15.8
Debian ≫ Advanced Package Tool Version 0.8.15.9
Debian ≫ Advanced Package Tool Version 0.8.15.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.7% 0.743
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 2.6 4.9 2.9
AV:N/AC:H/Au:N/C:N/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://seclists.org/fulldisclosure/2012/Jun/267
http://www.ubuntu.com/usn/USN-1475-1
http://www.ubuntu.com/usn/USN-1477-1
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1013128