Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2009-1358

Published: Apr 21, 2009 | Modified: Jan 08, 2020
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2009-1358
CWEhttps://cwe.mitre.org/data/definitions/NVD-Other.html

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories.

Affected Software

Name Vendor Start Version End Version
Advanced_package_tool Debian * 0.7.20 (including)
Advanced_package_tool Debian 0.7.0 (including) 0.7.0 (including)
Advanced_package_tool Debian 0.7.1 (including) 0.7.1 (including)
Advanced_package_tool Debian 0.7.2 (including) 0.7.2 (including)
Advanced_package_tool Debian 0.7.2-0.1 (including) 0.7.2-0.1 (including)
Advanced_package_tool Debian 0.7.10 (including) 0.7.10 (including)
Advanced_package_tool Debian 0.7.11 (including) 0.7.11 (including)
Advanced_package_tool Debian 0.7.12 (including) 0.7.12 (including)
Advanced_package_tool Debian 0.7.13 (including) 0.7.13 (including)
Advanced_package_tool Debian 0.7.14 (including) 0.7.14 (including)
Advanced_package_tool Debian 0.7.15 (including) 0.7.15 (including)
Advanced_package_tool Debian 0.7.15-exp1 (including) 0.7.15-exp1 (including)
Advanced_package_tool Debian 0.7.15-exp2 (including) 0.7.15-exp2 (including)
Advanced_package_tool Debian 0.7.15-exp3 (including) 0.7.15-exp3 (including)
Advanced_package_tool Debian 0.7.16 (including) 0.7.16 (including)
Advanced_package_tool Debian 0.7.17 (including) 0.7.17 (including)
Advanced_package_tool Debian 0.7.17-exp1 (including) 0.7.17-exp1 (including)
Advanced_package_tool Debian 0.7.17-exp2 (including) 0.7.17-exp2 (including)
Advanced_package_tool Debian 0.7.17-exp3 (including) 0.7.17-exp3 (including)
Advanced_package_tool Debian 0.7.17-exp4 (including) 0.7.17-exp4 (including)
Advanced_package_tool Debian 0.7.18 (including) 0.7.18 (including)
Advanced_package_tool Debian 0.7.19 (including) 0.7.19 (including)
Advanced_package_tool Debian 0.7.20.1 (including) 0.7.20.1 (including)
Advanced_package_tool Debian 0.7.20.2 (including) 0.7.20.2 (including)
Advanced_package_tool Debian 0.7.21 (including) 0.7.21 (including)
Apt Debian 0.0.1 (including) 0.0.1 (including)
Apt Debian 0.0.2 (including) 0.0.2 (including)
Apt Debian 0.0.3 (including) 0.0.3 (including)
Apt Debian 0.0.4 (including) 0.0.4 (including)
Apt Debian 0.0.5 (including) 0.0.5 (including)
Apt Debian 0.0.6 (including) 0.0.6 (including)
Apt Debian 0.0.7 (including) 0.0.7 (including)
Apt Debian 0.0.8 (including) 0.0.8 (including)
Apt Debian 0.0.9 (including) 0.0.9 (including)
Apt Debian 0.0.10 (including) 0.0.10 (including)
Apt Debian 0.0.11 (including) 0.0.11 (including)
Apt Debian 0.0.12 (including) 0.0.12 (including)
Apt Debian 0.0.13 (including) 0.0.13 (including)
Apt Debian 0.0.13-bo1 (including) 0.0.13-bo1 (including)
Apt Debian 0.0.14 (including) 0.0.14 (including)
Apt Debian 0.0.15 (including) 0.0.15 (including)
Apt Debian 0.0.15-0.1bo (including) 0.0.15-0.1bo (including)
Apt Debian 0.0.15-0.2bo (including) 0.0.15-0.2bo (including)
Apt Debian 0.0.16-1 (including) 0.0.16-1 (including)
Apt Debian 0.0.17-1 (including) 0.0.17-1 (including)
Apt Debian 0.1 (including) 0.1 (including)
Apt Debian 0.1.1 (including) 0.1.1 (including)
Apt Debian 0.1.3 (including) 0.1.3 (including)
Apt Debian 0.1.5 (including) 0.1.5 (including)
Apt Debian 0.1.6 (including) 0.1.6 (including)
Apt Debian 0.1.7 (including) 0.1.7 (including)
Apt Debian 0.1.9 (including) 0.1.9 (including)
Apt Debian 0.3.0 (including) 0.3.0 (including)
Apt Debian 0.3.1 (including) 0.3.1 (including)
Apt Debian 0.3.2 (including) 0.3.2 (including)
Apt Debian 0.3.3 (including) 0.3.3 (including)
Apt Debian 0.3.4 (including) 0.3.4 (including)
Apt Debian 0.3.6 (including) 0.3.6 (including)
Apt Debian 0.3.7 (including) 0.3.7 (including)
Apt Debian 0.3.9 (including) 0.3.9 (including)
Apt Debian 0.3.11 (including) 0.3.11 (including)
Apt Debian 0.3.12 (including) 0.3.12 (including)
Apt Debian 0.3.13 (including) 0.3.13 (including)
Apt Debian 0.3.14 (including) 0.3.14 (including)
Apt Debian 0.3.15 (including) 0.3.15 (including)
Apt Debian 0.3.16 (including) 0.3.16 (including)
Apt Debian 0.3.17 (including) 0.3.17 (including)
Apt Debian 0.3.18 (including) 0.3.18 (including)
Apt Debian 0.3.19 (including) 0.3.19 (including)
Apt Debian 0.5.0 (including) 0.5.0 (including)
Apt Debian 0.5.1 (including) 0.5.1 (including)
Apt Debian 0.5.2 (including) 0.5.2 (including)
Apt Debian 0.5.3 (including) 0.5.3 (including)
Apt Debian 0.5.4 (including) 0.5.4 (including)
Apt Debian 0.5.5 (including) 0.5.5 (including)
Apt Debian 0.5.5.1 (including) 0.5.5.1 (including)
Apt Debian 0.5.6 (including) 0.5.6 (including)
Apt Debian 0.5.7 (including) 0.5.7 (including)
Apt Debian 0.5.8 (including) 0.5.8 (including)
Apt Debian 0.5.9 (including) 0.5.9 (including)
Apt Debian 0.5.10 (including) 0.5.10 (including)
Apt Debian 0.5.11 (including) 0.5.11 (including)
Apt Debian 0.5.12 (including) 0.5.12 (including)
Apt Debian 0.5.13 (including) 0.5.13 (including)
Apt Debian 0.5.14 (including) 0.5.14 (including)
Apt Debian 0.5.15 (including) 0.5.15 (including)
Apt Debian 0.5.16 (including) 0.5.16 (including)
Apt Debian 0.5.17 (including) 0.5.17 (including)
Apt Debian 0.5.18 (including) 0.5.18 (including)
Apt Debian 0.5.19 (including) 0.5.19 (including)
Apt Debian 0.5.20 (including) 0.5.20 (including)
Apt Debian 0.5.21 (including) 0.5.21 (including)
Apt Debian 0.5.22 (including) 0.5.22 (including)
Apt Debian 0.5.23 (including) 0.5.23 (including)
Apt Debian 0.5.24 (including) 0.5.24 (including)
Apt Debian 0.5.25 (including) 0.5.25 (including)
Apt Debian 0.5.26 (including) 0.5.26 (including)
Apt Debian 0.5.27 (including) 0.5.27 (including)
Apt Debian 0.5.28 (including) 0.5.28 (including)
Apt Debian 0.5.29 (including) 0.5.29 (including)
Apt Debian 0.5.30 (including) 0.5.30 (including)
Apt Debian 0.5.30-ubuntu1 (including) 0.5.30-ubuntu1 (including)
Apt Debian 0.5.30-ubuntu2 (including) 0.5.30-ubuntu2 (including)
Apt Debian 0.5.31 (including) 0.5.31 (including)
Apt Debian 0.5.32 (including) 0.5.32 (including)
Apt Debian 0.6.0 (including) 0.6.0 (including)
Apt Debian 0.6.1 (including) 0.6.1 (including)
Apt Debian 0.6.2 (including) 0.6.2 (including)
Apt Debian 0.6.3 (including) 0.6.3 (including)
Apt Debian 0.6.4 (including) 0.6.4 (including)
Apt Debian 0.6.5 (including) 0.6.5 (including)
Apt Debian 0.6.6 (including) 0.6.6 (including)
Apt Debian 0.6.7 (including) 0.6.7 (including)
Apt Debian 0.6.8 (including) 0.6.8 (including)
Apt Debian 0.6.9 (including) 0.6.9 (including)
Apt Debian 0.6.10 (including) 0.6.10 (including)
Apt Debian 0.6.11 (including) 0.6.11 (including)
Apt Debian 0.6.12 (including) 0.6.12 (including)
Apt Debian 0.6.13 (including) 0.6.13 (including)
Apt Debian 0.6.14 (including) 0.6.14 (including)
Apt Debian 0.6.15 (including) 0.6.15 (including)
Apt Debian 0.6.16 (including) 0.6.16 (including)
Apt Debian 0.6.17 (including) 0.6.17 (including)
Apt Debian 0.6.18 (including) 0.6.18 (including)
Apt Debian 0.6.19 (including) 0.6.19 (including)
Apt Debian 0.6.20 (including) 0.6.20 (including)
Apt Debian 0.6.21 (including) 0.6.21 (including)
Apt Debian 0.6.22 (including) 0.6.22 (including)
Apt Debian 0.6.23 (including) 0.6.23 (including)
Apt Debian 0.6.24 (including) 0.6.24 (including)
Apt Debian 0.6.25 (including) 0.6.25 (including)
Apt Debian 0.6.27 (including) 0.6.27 (including)
Apt Debian 0.6.27-ubuntu1 (including) 0.6.27-ubuntu1 (including)
Apt Debian 0.6.27-ubuntu2 (including) 0.6.27-ubuntu2 (including)
Apt Debian 0.6.27-ubuntu3 (including) 0.6.27-ubuntu3 (including)
Apt Debian 0.6.27-ubuntu4 (including) 0.6.27-ubuntu4 (including)
Apt Debian 0.6.28 (including) 0.6.28 (including)
Apt Debian 0.6.29 (including) 0.6.29 (including)
Apt Debian 0.6.30 (including) 0.6.30 (including)
Apt Debian 0.6.31 (including) 0.6.31 (including)
Apt Debian 0.6.32 (including) 0.6.32 (including)
Apt Debian 0.6.33 (including) 0.6.33 (including)
Apt Debian 0.6.34 (including) 0.6.34 (including)
Apt Debian 0.6.35 (including) 0.6.35 (including)
Apt Debian 0.6.36 (including) 0.6.36 (including)
Apt Debian 0.6.36-ubuntu1 (including) 0.6.36-ubuntu1 (including)
Apt Debian 0.6.37 (including) 0.6.37 (including)
Apt Debian 0.6.38 (including) 0.6.38 (including)
Apt Debian 0.6.39 (including) 0.6.39 (including)
Apt Debian 0.6.40 (including) 0.6.40 (including)
Apt Debian 0.6.40.1 (including) 0.6.40.1 (including)
Apt Debian 0.6.41 (including) 0.6.41 (including)
Apt Debian 0.6.42 (including) 0.6.42 (including)
Apt Debian 0.6.42.1 (including) 0.6.42.1 (including)
Apt Debian 0.6.42.2 (including) 0.6.42.2 (including)
Apt Debian 0.6.42.3 (including) 0.6.42.3 (including)
Apt Debian 0.6.43 (including) 0.6.43 (including)
Apt Debian 0.6.43.1 (including) 0.6.43.1 (including)
Apt Debian 0.6.43.2 (including) 0.6.43.2 (including)
Apt Debian 0.6.43.3 (including) 0.6.43.3 (including)
Apt Debian 0.6.44 (including) 0.6.44 (including)
Apt Debian 0.6.44.1 (including) 0.6.44.1 (including)
Apt Debian 0.6.44.1-0.1 (including) 0.6.44.1-0.1 (including)
Apt Debian 0.6.44.2 (including) 0.6.44.2 (including)
Apt Debian 0.6.44.2-exp1 (including) 0.6.44.2-exp1 (including)
Apt Debian 0.6.45 (including) 0.6.45 (including)
Apt Debian 0.6.46 (including) 0.6.46 (including)
Apt Debian 0.6.46.1 (including) 0.6.46.1 (including)
Apt Debian 0.6.46.2 (including) 0.6.46.2 (including)
Apt Debian 0.6.46.3 (including) 0.6.46.3 (including)
Apt Debian 0.6.46.3-0.1 (including) 0.6.46.3-0.1 (including)
Apt Debian 0.6.46.3-0.2 (including) 0.6.46.3-0.2 (including)
Apt Debian 0.6.46.4-0.1 (including) 0.6.46.4-0.1 (including)
Apt Debian 0.7.3 (including) 0.7.3 (including)
Apt Debian 0.7.4 (including) 0.7.4 (including)
Apt Debian 0.7.5 (including) 0.7.5 (including)
Apt Debian 0.7.6 (including) 0.7.6 (including)
Apt Debian 0.7.7 (including) 0.7.7 (including)
Apt Debian 0.7.8 (including) 0.7.8 (including)
Apt Debian 0.7.9 (including) 0.7.9 (including)

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2024 Aqua Security Software Ltd.   Privacy Policy | Terms of Use