Debian Advanced Package Tool 0.8.16

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:debian:advanced_package_tool:0.8.16:*:*:*:*:*:*:*

part: a version: 0.8.16 update: *

VendorDebian (4199fb5b-36f6-5ceb-83d5-855460345e36)
ProductAdvanced Package Tool (54c1cf6d-fa55-5c38-8fb8-da09d2686f2f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/apt purl2cpe 2026-06-01 10:17:13.505841
pkg:deb/ubuntu/apt purl2cpe 2026-06-01 10:17:13.505843
pkg:debian/apt-team/apt purl2cpe 2026-06-01 10:17:13.505842
pkg:github/debian/apt purl2cpe 2026-06-01 10:17:13.505845

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-1051 vulnerable 2026-06-08 05:03:52.314993 Details available
apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify packages before installation via unknown vectors, possibly related to integrity checking and the use of third-party repositories.
Published: 2013-03-21T17:00:00.000Z
Updated: 2024-09-17T02:47:34.049Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0961 vulnerable 2026-06-08 05:00:46.752742 Details available
Apt 0.8.16~exp5ubuntu13.x before 0.8.16~exp5ubuntu13.6, 0.8.16~exp12ubuntu10.x before 0.8.16~exp12ubuntu10.7, and 0.9.7.5ubuntu5.x before 0.9.7.5ubuntu5.2, as used in Ubuntu, uses world-readable permissions for /var/log/apt/term.log, which allows local users to obtain sensitive shell information by reading the log file.
Published: 2012-12-26T22:00:00.000Z
Updated: 2024-09-16T17:28:35.582Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.