NVD

Id
8710  
Name
CVE-2011-1829  
Description
APT before 0.8.15.2 does not properly validate inline GPG signatures, which allows man-in-the-middle attackers to install modified packages via vectors involving lack of an initial clearsigned message.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-07-26  
Modified Date
2011-08-01  
Seq
2011-1829  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
50265 8710 CVE-2011-1829 http://launchpadlibrarian.net/75126628/apt_0.8.13.2ubuntu2_0.8.13.2ubuntu4.1.diff.gz  View
50266 8710 CVE-2011-1829 http://packages.debian.org/changelogs/pool/main/a/apt/current/changelog  View
50267 8710 CVE-2011-1829 48671  View
50268 8710 CVE-2011-1829 USN-1169-1  View
50269 8710 CVE-2011-1829 apt-gpg-security-bypass(68560)  View
50270 8710 CVE-2011-1829 https://launchpad.net/bugs/784473  View
50271 8710 CVE-2011-1829 https://launchpad.net/ubuntu/+archive/primary/+sourcepub/1817196/+listing-archive-extra  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34319 JVNDB-2011-004561 APT における変更されたパッケージをインストールされる脆弱性 APT は、インライン GPG シグネチャを適切に検証しないため、変更されたパッケージをインストールされる脆弱性が存在します。 CVE-2011-1829 49736 CVE-2011-1829 8710 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004561.html 2011-07-26 2012-03-27 View