PT-2014-3653 · Debian+1 · Apt+1

Publicado 2014-09-16 · Atualizado 2020-01-08 · CVE-2014-0487

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions APT versions prior to 1.0.9

Description The issue concerns the failure to verify downloaded files if they have been modified, as indicated by the If-Modified-Since header. This has an unspecified impact and attack vectors.

Recommendations For versions prior to 1.0.9, update to version 1.0.9 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2014-0487

DLA-53-1

DSA-3025-1

USN-2348-1

Produtos afetados

Apt

Ubuntu

Referências · 20

• https://cve.org/CVERecord?id=CVE-2014-0487 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0487 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2014-0487 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2014-0488 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2014-0487 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2014-0489 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2014-0487 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2014-0490 · Aviso do Fabricante
• http://debian.org/security/2014/dsa-3025 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0490 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-0487 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-2348-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-2348-1 · Aviso do Fabricante
• http://secunia.com/advisories/61275 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0488 · Nota de Segurança