Debian Advanced Package Tool (APT) 1.0.3
Approved changes feed: RSS · Atom
cpe:2.3:a:debian:advanced_package_tool:1.0.3:*:*:*:*:*:*:*
part: a version: 1.0.3 update: *
| Vendor | Debian (4199fb5b-36f6-5ceb-83d5-855460345e36) |
|---|---|
| Product | Advanced Package Tool (54c1cf6d-fa55-5c38-8fb8-da09d2686f2f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/apt |
purl2cpe | 2026-06-01 10:17:13.506319 |
pkg:deb/ubuntu/apt |
purl2cpe | 2026-06-01 10:17:13.506323 |
pkg:debian/apt-team/apt |
purl2cpe | 2026-06-01 10:17:13.506321 |
pkg:github/debian/apt |
purl2cpe | 2026-06-01 10:17:13.506324 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-0490 |
vulnerable | 2026-06-08 05:05:13.139626 |
Details available
The apt-get download command in APT before 1.0.9 does not properly validate signatures for packages, which allows remote attackers to execute arbitrary code via a crafted package.
Published: 2014-11-03T22:00:00.000Z
Updated: 2024-08-06T09:20:18.503Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0489 |
vulnerable | 2026-06-08 05:05:13.137973 |
Details available
APT before 1.0.9, when the Acquire::GzipIndexes option is enabled, does not validate checksums, which allows remote attackers to execute arbitrary code via a crafted package.
Published: 2014-11-03T22:00:00.000Z
Updated: 2024-08-06T09:20:18.508Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0488 |
vulnerable | 2026-06-08 05:05:13.137623 |
Details available
APT before 1.0.9 does not "invalidate repository data" when moving from an unauthenticated to authenticated state, which allows remote attackers to have unspecified impact via crafted repository data.
Published: 2014-11-03T22:00:00.000Z
Updated: 2024-08-06T09:20:18.468Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0487 |
vulnerable | 2026-06-08 05:05:13.136663 |
Details available
APT before 1.0.9 does not verify downloaded files if they have been modified as indicated using the If-Modified-Since header, which has unspecified impact and attack vectors.
Published: 2014-11-03T22:00:00.000Z
Updated: 2024-08-06T09:20:18.574Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.