CVE-2009-1358

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 79%
VendorProductVersion
debianadvanced_package_tool
𝑥
≤ 0.7.20
debianadvanced_package_tool
0.7.0
debianadvanced_package_tool
0.7.1
debianadvanced_package_tool
0.7.2
debianadvanced_package_tool
0.7.2-0.1
debianadvanced_package_tool
0.7.10
debianadvanced_package_tool
0.7.11
debianadvanced_package_tool
0.7.12
debianadvanced_package_tool
0.7.13
debianadvanced_package_tool
0.7.14
debianadvanced_package_tool
0.7.15
debianadvanced_package_tool
0.7.15:exp1
debianadvanced_package_tool
0.7.15:exp2
debianadvanced_package_tool
0.7.15:exp3
debianadvanced_package_tool
0.7.16
debianadvanced_package_tool
0.7.17
debianadvanced_package_tool
0.7.17:exp1
debianadvanced_package_tool
0.7.17:exp2
debianadvanced_package_tool
0.7.17:exp3
debianadvanced_package_tool
0.7.17:exp4
debianadvanced_package_tool
0.7.18
debianadvanced_package_tool
0.7.19
debianadvanced_package_tool
0.7.20.1
debianadvanced_package_tool
0.7.20.2
debianadvanced_package_tool
0.7.21
debianapt
0.0.1
debianapt
0.0.2
debianapt
0.0.3
debianapt
0.0.4
debianapt
0.0.5
debianapt
0.0.6
debianapt
0.0.7
debianapt
0.0.8
debianapt
0.0.9
debianapt
0.0.10
debianapt
0.0.11
debianapt
0.0.12
debianapt
0.0.13
debianapt
0.0.13-bo1
debianapt
0.0.14
debianapt
0.0.15
debianapt
0.0.15-0.1bo
debianapt
0.0.15-0.2bo
debianapt
0.0.16-1
debianapt
0.0.17-1
debianapt
0.1
debianapt
0.1.1
debianapt
0.1.3
debianapt
0.1.5
debianapt
0.1.6
debianapt
0.1.7
debianapt
0.1.9
debianapt
0.3.0
debianapt
0.3.1
debianapt
0.3.2
debianapt
0.3.3
debianapt
0.3.4
debianapt
0.3.6
debianapt
0.3.7
debianapt
0.3.9
debianapt
0.3.11
debianapt
0.3.12
debianapt
0.3.13
debianapt
0.3.14
debianapt
0.3.15
debianapt
0.3.16
debianapt
0.3.17
debianapt
0.3.18
debianapt
0.3.19
debianapt
0.5.0
debianapt
0.5.1
debianapt
0.5.2
debianapt
0.5.3
debianapt
0.5.4
debianapt
0.5.5
debianapt
0.5.5.1
debianapt
0.5.6
debianapt
0.5.7
debianapt
0.5.8
debianapt
0.5.9
debianapt
0.5.10
debianapt
0.5.11
debianapt
0.5.12
debianapt
0.5.13
debianapt
0.5.14
debianapt
0.5.15
debianapt
0.5.16
debianapt
0.5.17
debianapt
0.5.18
debianapt
0.5.19
debianapt
0.5.20
debianapt
0.5.21
debianapt
0.5.22
debianapt
0.5.23
debianapt
0.5.24
debianapt
0.5.25
debianapt
0.5.26
debianapt
0.5.27
debianapt
0.5.28
debianapt
0.5.29
debianapt
0.5.30
debianapt
0.5.30:ubuntu1
debianapt
0.5.30:ubuntu2
debianapt
0.5.31
debianapt
0.5.32
debianapt
0.6.0
debianapt
0.6.1
debianapt
0.6.2
debianapt
0.6.3
debianapt
0.6.4
debianapt
0.6.5
debianapt
0.6.6
debianapt
0.6.7
debianapt
0.6.8
debianapt
0.6.9
debianapt
0.6.10
debianapt
0.6.11
debianapt
0.6.12
debianapt
0.6.13
debianapt
0.6.14
debianapt
0.6.15
debianapt
0.6.16
debianapt
0.6.17
debianapt
0.6.18
debianapt
0.6.19
debianapt
0.6.20
debianapt
0.6.21
debianapt
0.6.22
debianapt
0.6.23
debianapt
0.6.24
debianapt
0.6.25
debianapt
0.6.27
debianapt
0.6.27:ubuntu1
debianapt
0.6.27:ubuntu2
debianapt
0.6.27:ubuntu3
debianapt
0.6.27:ubuntu4
debianapt
0.6.28
debianapt
0.6.29
debianapt
0.6.30
debianapt
0.6.31
debianapt
0.6.32
debianapt
0.6.33
debianapt
0.6.34
debianapt
0.6.35
debianapt
0.6.36
debianapt
0.6.36:ubuntu1
debianapt
0.6.37
debianapt
0.6.38
debianapt
0.6.39
debianapt
0.6.40
debianapt
0.6.40.1
debianapt
0.6.41
debianapt
0.6.42
debianapt
0.6.42.1
debianapt
0.6.42.2
debianapt
0.6.42.3
debianapt
0.6.43
debianapt
0.6.43.1
debianapt
0.6.43.2
debianapt
0.6.43.3
debianapt
0.6.44
debianapt
0.6.44.1
debianapt
0.6.44.1-0.1
debianapt
0.6.44.2
debianapt
0.6.44.2:exp1
debianapt
0.6.45
debianapt
0.6.46
debianapt
0.6.46.1
debianapt
0.6.46.2
debianapt
0.6.46.3
debianapt
0.6.46.3-0.1
debianapt
0.6.46.3-0.2
debianapt
0.6.46.4-0.1
debianapt
0.7.3
debianapt
0.7.4
debianapt
0.7.5
debianapt
0.7.6
debianapt
0.7.7
debianapt
0.7.8
debianapt
0.7.9
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
apt
bullseye
2.2.4
fixed
bookworm
2.6.1
fixed
sid
2.9.10
fixed
trixie
2.9.10
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
apt
intrepid
Fixed 0.7.14ubuntu6.1
released
hardy
Fixed 0.7.9ubuntu17.2
released
dapper
Fixed 0.6.43.3ubuntu3.1
released
References
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=433091
http://secunia.com/advisories/34829
http://secunia.com/advisories/34832
http://secunia.com/advisories/34874
http://www.debian.org/security/2009/dsa-1779
http://www.securityfocus.com/bid/34630
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/356012
https://exchange.xforce.ibmcloud.com/vulnerabilities/50086
https://usn.ubuntu.com/762-1/
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=433091
http://secunia.com/advisories/34829
http://secunia.com/advisories/34832
http://secunia.com/advisories/34874
http://www.debian.org/security/2009/dsa-1779
http://www.securityfocus.com/bid/34630
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/356012
https://exchange.xforce.ibmcloud.com/vulnerabilities/50086
https://usn.ubuntu.com/762-1/