medium6.8
CVE-2014-6273
Buffer overflow in the HTTP transport code in apt-get in APT 1.0.1 and earlier allows man-in-the-middle attackers to cause a denial of service (crash) or possi…
Impact
Buffer overflow in the HTTP transport code in apt-get in APT 1.0.1 and earlier allows man-in-the-middle attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Debian | Advanced Package Tool | through 1.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/61605
- http://secunia.com/advisories/61710
- http://www.debian.org/security/2014/dsa-3031
- http://www.securityfocus.com/bid/70075
- http://www.ubuntu.com/usn/USN-2353-1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96151
- http://secunia.com/advisories/61605
- http://secunia.com/advisories/61710
- http://www.debian.org/security/2014/dsa-3031
- http://www.securityfocus.com/bid/70075
- http://www.ubuntu.com/usn/USN-2353-1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/96151