medium4.3
CVE-2013-1051
apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify packages before ins…
Impact
apt 0.8.16, 0.9.7, and possibly other versions does not properly handle InRelease files, which allows man-in-the-middle attackers to modify packages before installation via unknown vectors, possibly related to integrity checking and the use of third-party repositories.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Debian | Advanced Package Tool | Version 0.8.16 |
| Debian | Apt | Version 0.9.7 |
| Canonical | Ubuntu Linux | Versions 11.10, 12.04, 12.10 |