Debian Advanced Package Tool 0.7.0
Approved changes feed: RSS · Atom
cpe:2.3:a:debian:advanced_package_tool:0.7.0:*:*:*:*:*:*:*
part: a version: 0.7.0 update: *
| Vendor | Debian (4199fb5b-36f6-5ceb-83d5-855460345e36) |
|---|---|
| Product | Advanced Package Tool (54c1cf6d-fa55-5c38-8fb8-da09d2686f2f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/apt |
purl2cpe | 2026-06-01 10:17:13.431680 |
pkg:deb/ubuntu/apt |
purl2cpe | 2026-06-01 10:17:13.431683 |
pkg:debian/apt-team/apt |
purl2cpe | 2026-06-01 10:17:13.431682 |
pkg:github/debian/apt |
purl2cpe | 2026-06-01 10:17:13.431685 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-3587 |
vulnerable | 2026-06-08 05:02:11.017807 |
Details available
APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote attackers to install Trojan horse packages via a man-in-the-middle (MITM) attack.
Published: 2012-06-19T20:00:00.000Z
Updated: 2024-09-16T22:30:53.425Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0954 |
vulnerable | 2026-06-08 05:00:46.617264 |
Details available
APT 0.7.x before 0.7.25 and 0.8.x before 0.8.16, when using the apt-key net-update to import keyrings, relies on GnuPG argument order and does not check GPG subkeys, which might allow remote attackers to install altered packages via a man-in-the-middle (MITM) attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-3587.
Published: 2012-06-19T20:00:00.000Z
Updated: 2024-09-16T20:13:26.664Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1358 |
vulnerable | 2026-06-08 04:51:22.206686 |
Details available
apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories.
Published: 2009-04-21T23:00:00.000Z
Updated: 2024-08-07T05:13:25.407Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.