CVE-2014-0487

published 2014-11-03

CVE-2014-0487: APT before 1.0.9 does not verify downloaded files if they have been modified as indicated using the If-Modified-Since header, which has unspecified impact and…

high 7.5 CVSS 3.1

AV N AC L Au N C P I P A P

APT before 1.0.9 does not verify downloaded files if they have been modified as indicated using the If-Modified-Since header, which has unspecified impact and attack vectors.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
debian	advanced_package_tool	—	—
debian	advanced_package_tool	—	—
debian	apt	< apt 1.0.9 (bookworm)	apt 1.0.9 (bookworm)
debian	apt	>= 0 < 1.0.9	1.0.9
debian	apt	>= 0 < 1.0.9	1.0.9
debian	apt	>= 0 < 1.0.9	1.0.9
debian	apt	>= 0 < 1.0.9	1.0.9
debian	apt	>= 0 < 1.0.1ubuntu2.3	1.0.1ubuntu2.3

CVSS provenance

nvd 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

osv 7.5 HIGH