CVE-2009-1358 : Details

CVE-2009-1358

1.37%V4
Network
2009-04-21
23h00 +00:00
2024-08-07
05h13 +00:00
CVE.org
NVD
Benachrichtigungen für ein CVE
Bleiben Sie über alle Änderungen zu einem bestimmten CVE informiert.
Benachrichtigungen verwalten

CVE-Beschreibungen

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories.

CVE-Informationen

Metriken

Metriken Score Schweregrad CVSS Vektor Source
V2 10 AV:N/AC:L/Au:N/C:C/I:C/A:C nvd@nist.gov

EPSS

EPSS ist ein Bewertungsmodell, das die Wahrscheinlichkeit vorhersagt, dass eine Schwachstelle ausgenutzt wird.

EPSS-Score

Das EPSS-Modell liefert einen Wahrscheinlichkeitswert zwischen 0 und 1 (0 und 100%). Je höher der Score, desto größer die Wahrscheinlichkeit, dass eine Schwachstelle ausgenutzt wird.

EPSS-Perzentil

Das Perzentil wird verwendet, um CVEs nach ihrem EPSS-Score zu ranken. Ein CVE im 95. Perzentil gemäß seinem EPSS-Score ist beispielsweise mit größerer Wahrscheinlichkeit ausnutzbar als 95% der anderen CVEs. Das Perzentil dient somit zum Vergleich des EPSS-Scores eines CVEs mit dem anderer CVEs.
EPSS First.org

Products Mentioned

Configuraton 0

Debian>>Advanced_package_tool >> Version To (including) 0.7.20

Debian>>Advanced_package_tool >> Version 0.7.0

Debian>>Advanced_package_tool >> Version 0.7.1

Debian>>Advanced_package_tool >> Version 0.7.2

Debian>>Advanced_package_tool >> Version 0.7.2-0.1

Debian>>Advanced_package_tool >> Version 0.7.10

Debian>>Advanced_package_tool >> Version 0.7.11

Debian>>Advanced_package_tool >> Version 0.7.12

Debian>>Advanced_package_tool >> Version 0.7.13

Debian>>Advanced_package_tool >> Version 0.7.14

Debian>>Advanced_package_tool >> Version 0.7.15

Debian>>Advanced_package_tool >> Version 0.7.15

Debian>>Advanced_package_tool >> Version 0.7.15

Debian>>Advanced_package_tool >> Version 0.7.15

Debian>>Advanced_package_tool >> Version 0.7.16

Debian>>Advanced_package_tool >> Version 0.7.17

Debian>>Advanced_package_tool >> Version 0.7.17

Debian>>Advanced_package_tool >> Version 0.7.17

Debian>>Advanced_package_tool >> Version 0.7.17

Debian>>Advanced_package_tool >> Version 0.7.17

Debian>>Advanced_package_tool >> Version 0.7.18

Debian>>Advanced_package_tool >> Version 0.7.19

Debian>>Advanced_package_tool >> Version 0.7.20.1

Debian>>Advanced_package_tool >> Version 0.7.20.2

Debian>>Advanced_package_tool >> Version 0.7.21

Debian>>Apt >> Version 0.0.1

Debian>>Apt >> Version 0.0.2

Debian>>Apt >> Version 0.0.3

Debian>>Apt >> Version 0.0.4

Debian>>Apt >> Version 0.0.5

Debian>>Apt >> Version 0.0.6

Debian>>Apt >> Version 0.0.7

Debian>>Apt >> Version 0.0.8

Debian>>Apt >> Version 0.0.9

Debian>>Apt >> Version 0.0.10

Debian>>Apt >> Version 0.0.11

Debian>>Apt >> Version 0.0.12

Debian>>Apt >> Version 0.0.13

Debian>>Apt >> Version 0.0.13-bo1

Debian>>Apt >> Version 0.0.14

Debian>>Apt >> Version 0.0.15

Debian>>Apt >> Version 0.0.15-0.1bo

Debian>>Apt >> Version 0.0.15-0.2bo

Debian>>Apt >> Version 0.0.16-1

Debian>>Apt >> Version 0.0.17-1

Debian>>Apt >> Version 0.1

Debian>>Apt >> Version 0.1.1

Debian>>Apt >> Version 0.1.3

Debian>>Apt >> Version 0.1.5

Debian>>Apt >> Version 0.1.6

Debian>>Apt >> Version 0.1.7

Debian>>Apt >> Version 0.1.9

Debian>>Apt >> Version 0.3.0

Debian>>Apt >> Version 0.3.1

Debian>>Apt >> Version 0.3.2

Debian>>Apt >> Version 0.3.3

Debian>>Apt >> Version 0.3.4

Debian>>Apt >> Version 0.3.6

Debian>>Apt >> Version 0.3.7

Debian>>Apt >> Version 0.3.9

Debian>>Apt >> Version 0.3.11

Debian>>Apt >> Version 0.3.12

Debian>>Apt >> Version 0.3.13

Debian>>Apt >> Version 0.3.14

Debian>>Apt >> Version 0.3.15

Debian>>Apt >> Version 0.3.16

Debian>>Apt >> Version 0.3.17

Debian>>Apt >> Version 0.3.18

Debian>>Apt >> Version 0.3.19

Debian>>Apt >> Version 0.5.0

Debian>>Apt >> Version 0.5.1

Debian>>Apt >> Version 0.5.2

Debian>>Apt >> Version 0.5.3

Debian>>Apt >> Version 0.5.4

Debian>>Apt >> Version 0.5.5

Debian>>Apt >> Version 0.5.5.1

Debian>>Apt >> Version 0.5.6

Debian>>Apt >> Version 0.5.7

Debian>>Apt >> Version 0.5.8

Debian>>Apt >> Version 0.5.9

Debian>>Apt >> Version 0.5.10

Debian>>Apt >> Version 0.5.11

Debian>>Apt >> Version 0.5.12

Debian>>Apt >> Version 0.5.13

Debian>>Apt >> Version 0.5.14

Debian>>Apt >> Version 0.5.15

Debian>>Apt >> Version 0.5.16

Debian>>Apt >> Version 0.5.17

Debian>>Apt >> Version 0.5.18

Debian>>Apt >> Version 0.5.19

Debian>>Apt >> Version 0.5.20

Debian>>Apt >> Version 0.5.21

Debian>>Apt >> Version 0.5.22

Debian>>Apt >> Version 0.5.23

Debian>>Apt >> Version 0.5.24

Debian>>Apt >> Version 0.5.25

Debian>>Apt >> Version 0.5.26

Debian>>Apt >> Version 0.5.27

Debian>>Apt >> Version 0.5.28

Debian>>Apt >> Version 0.5.29

Debian>>Apt >> Version 0.5.30

Debian>>Apt >> Version 0.5.30

Debian>>Apt >> Version 0.5.30

Debian>>Apt >> Version 0.5.31

Debian>>Apt >> Version 0.5.32

Debian>>Apt >> Version 0.6.0

Debian>>Apt >> Version 0.6.1

Debian>>Apt >> Version 0.6.2

Debian>>Apt >> Version 0.6.3

Debian>>Apt >> Version 0.6.4

Debian>>Apt >> Version 0.6.5

Debian>>Apt >> Version 0.6.6

Debian>>Apt >> Version 0.6.7

Debian>>Apt >> Version 0.6.8

Debian>>Apt >> Version 0.6.9

Debian>>Apt >> Version 0.6.10

Debian>>Apt >> Version 0.6.11

Debian>>Apt >> Version 0.6.12

Debian>>Apt >> Version 0.6.13

Debian>>Apt >> Version 0.6.14

Debian>>Apt >> Version 0.6.15

Debian>>Apt >> Version 0.6.16

Debian>>Apt >> Version 0.6.17

Debian>>Apt >> Version 0.6.18

Debian>>Apt >> Version 0.6.19

Debian>>Apt >> Version 0.6.20

Debian>>Apt >> Version 0.6.21

Debian>>Apt >> Version 0.6.22

Debian>>Apt >> Version 0.6.23

Debian>>Apt >> Version 0.6.24

Debian>>Apt >> Version 0.6.25

Debian>>Apt >> Version 0.6.27

Debian>>Apt >> Version 0.6.27

Debian>>Apt >> Version 0.6.27

Debian>>Apt >> Version 0.6.27

Debian>>Apt >> Version 0.6.27

Debian>>Apt >> Version 0.6.28

Debian>>Apt >> Version 0.6.29

Debian>>Apt >> Version 0.6.30

Debian>>Apt >> Version 0.6.31

Debian>>Apt >> Version 0.6.32

Debian>>Apt >> Version 0.6.33

Debian>>Apt >> Version 0.6.34

Debian>>Apt >> Version 0.6.35

Debian>>Apt >> Version 0.6.36

Debian>>Apt >> Version 0.6.36

Debian>>Apt >> Version 0.6.37

Debian>>Apt >> Version 0.6.38

Debian>>Apt >> Version 0.6.39

Debian>>Apt >> Version 0.6.40

Debian>>Apt >> Version 0.6.40.1

Debian>>Apt >> Version 0.6.41

Debian>>Apt >> Version 0.6.42

Debian>>Apt >> Version 0.6.42.1

Debian>>Apt >> Version 0.6.42.2

Debian>>Apt >> Version 0.6.42.3

Debian>>Apt >> Version 0.6.43

Debian>>Apt >> Version 0.6.43.1

Debian>>Apt >> Version 0.6.43.2

Debian>>Apt >> Version 0.6.43.3

Debian>>Apt >> Version 0.6.44

Debian>>Apt >> Version 0.6.44.1

Debian>>Apt >> Version 0.6.44.1-0.1

Debian>>Apt >> Version 0.6.44.2

Debian>>Apt >> Version 0.6.44.2

Debian>>Apt >> Version 0.6.45

Debian>>Apt >> Version 0.6.46

Debian>>Apt >> Version 0.6.46.1

Debian>>Apt >> Version 0.6.46.2

Debian>>Apt >> Version 0.6.46.3

Debian>>Apt >> Version 0.6.46.3-0.1

Debian>>Apt >> Version 0.6.46.3-0.2

Debian>>Apt >> Version 0.6.46.4-0.1

Debian>>Apt >> Version 0.7.3

Debian>>Apt >> Version 0.7.4

Debian>>Apt >> Version 0.7.5

Debian>>Apt >> Version 0.7.6

Debian>>Apt >> Version 0.7.7

Debian>>Apt >> Version 0.7.8

Debian>>Apt >> Version 0.7.9

Referenzen

http://secunia.com/advisories/34874
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.debian.org/security/2009/dsa-1779
Tags : vendor-advisory, x_refsource_DEBIAN
http://secunia.com/advisories/34829
Tags : third-party-advisory, x_refsource_SECUNIA
http://www.securityfocus.com/bid/34630
Tags : vdb-entry, x_refsource_BID
http://secunia.com/advisories/34832
Tags : third-party-advisory, x_refsource_SECUNIA
https://usn.ubuntu.com/762-1/
Tags : vendor-advisory, x_refsource_UBUNTU
Die auf CVE Find präsentierten Informationen stammen aus mehreren sorgfältig ausgewählten Referenzquellen. CVE-Daten werden von der MITRE Corporation und der National Vulnerability Database (NVD) bereitgestellt. Der Katalog bekannter ausgenutzter Schwachstellen (KEV) stammt von der Cybersecurity and Infrastructure Security Agency (CISA), während EPSS-Scores von FIRST.org kommen. Darüber hinaus werden Daten zu Software-Schwachstellen (CWE) und häufigen Angriffsmustern (CAPEC) von der MITRE Corporation gepflegt, und Informationen zu Hardware- und Software-Konfigurationen (CPE) werden von der NVD bereitgestellt.