← Back

CVE-2009-1358

nvd nist
Published: Apr 21, 2009Modified: Apr 23, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories.

Affected (180)

2 products
Advanced Package Tool
Apt
Configuration A
180 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Up to 0.7.20
Version 0.7.0
Version 0.7.10
Version 0.7.11
Version 0.7.12
Version 0.7.13
Version 0.7.14
Version 0.7.15
Version 0.7.15 exp1
Version 0.7.15 exp2
Version 0.7.15 exp3
Version 0.7.16
Version 0.7.17
Version 0.7.17 exp1
Version 0.7.17 exp2
Version 0.7.17 exp3
Version 0.7.17 exp4
Version 0.7.18
Version 0.7.19
Version 0.7.1
Version 0.7.2-0.1
Version 0.7.20.1
Version 0.7.20.2
Version 0.7.21
Version 0.7.2
Debian
Version 0.0.10
Version 0.0.11
Version 0.0.12
Version 0.0.13-bo1
Version 0.0.13
Version 0.0.14
Version 0.0.15-0.1bo
Version 0.0.15-0.2bo
Version 0.0.15
Version 0.0.16-1
Version 0.0.17-1
Version 0.0.1
Version 0.0.2
Version 0.0.3
Version 0.0.4
Version 0.0.5
Version 0.0.6
Version 0.0.7
Version 0.0.8
Version 0.0.9
Version 0.1.1
Version 0.1.3
Version 0.1.5
Version 0.1.6
Version 0.1.7
Version 0.1.9
Version 0.1
Version 0.3.0
Version 0.3.11
Version 0.3.12
Version 0.3.13
Version 0.3.14
Version 0.3.15
Version 0.3.16
Version 0.3.17
Version 0.3.18
Version 0.3.19
Version 0.3.1
Version 0.3.2
Version 0.3.3
Version 0.3.4
Version 0.3.6
Version 0.3.7
Version 0.3.9
Version 0.5.0
Version 0.5.10
Version 0.5.11
Version 0.5.12
Version 0.5.13
Version 0.5.14
Version 0.5.15
Version 0.5.16
Version 0.5.17
Version 0.5.18
Version 0.5.19
Version 0.5.1
Version 0.5.20
Version 0.5.21
Version 0.5.22
Version 0.5.23
Version 0.5.24
Version 0.5.25
Version 0.5.26
Version 0.5.27
Version 0.5.28
Version 0.5.29
Version 0.5.2
Version 0.5.30
Version 0.5.30 ubuntu1
Version 0.5.30 ubuntu2
Version 0.5.31
Version 0.5.32
Version 0.5.3
Version 0.5.4
Version 0.5.5.1
Version 0.5.5
Version 0.5.6
Version 0.5.7
Version 0.5.8
Version 0.5.9
Version 0.6.0
Version 0.6.10
Version 0.6.11
Version 0.6.12
Version 0.6.13
Version 0.6.14
Version 0.6.15
Version 0.6.16
Version 0.6.17
Version 0.6.18
Version 0.6.19
Version 0.6.1
Version 0.6.20
Version 0.6.21
Version 0.6.22
Version 0.6.23
Version 0.6.24
Version 0.6.25
Version 0.6.27
Version 0.6.27 ubuntu1
Version 0.6.27 ubuntu2
Version 0.6.27 ubuntu3
Version 0.6.27 ubuntu4
Version 0.6.28
Version 0.6.29
Version 0.6.2
Version 0.6.30
Version 0.6.31
Version 0.6.32
Version 0.6.33
Version 0.6.34
Version 0.6.35
Version 0.6.36
Version 0.6.36 ubuntu1
Version 0.6.37
Version 0.6.38
Version 0.6.39
Version 0.6.3
Version 0.6.40.1
Version 0.6.40
Version 0.6.41
Version 0.6.42.1
Version 0.6.42.2
Version 0.6.42.3
Version 0.6.42
Version 0.6.43.1
Version 0.6.43.2
Version 0.6.43.3
Version 0.6.43
Version 0.6.44.1-0.1
Version 0.6.44.1
Version 0.6.44.2
Version 0.6.44.2 exp1
Version 0.6.44
Version 0.6.45
Version 0.6.46.1
Version 0.6.46.2
Version 0.6.46.3-0.1
Version 0.6.46.3-0.2
Version 0.6.46.3
Version 0.6.46.4-0.1
Version 0.6.46
Version 0.6.4
Version 0.6.5
Version 0.6.6
Version 0.6.7
Version 0.6.8
Version 0.6.9
Version 0.7.3
Version 0.7.4
Version 0.7.5
Version 0.7.6
Version 0.7.7
Version 0.7.8
Version 0.7.9

References (18)

Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.