CVE-2013-1051
APT 0.8.16 and 0.9.7 - Man-in-the-Middle Package Modification via InRelease File Handling
Title source: llmDescription
apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify packages before installation via unknown vectors, possibly related to integrity checking and the use of third-party repositories.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/91428
Vendor Advisory vendor-advisory
x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1762-1
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/52633
Scores
EPSS
0.0134
EPSS Percentile
68.0%
Details
CWE
CWE-20
Status
published
Products (5)
canonical/ubuntu_linux
11.10
canonical/ubuntu_linux
12.04
canonical/ubuntu_linux
12.10
debian/advanced_package_tool
0.8.16
debian/apt
0.9.7
Published
Mar 21, 2013
Tracked Since
Feb 18, 2026