CVE-2014-0487 in Debian apt
Summary
APT before 1.0.9 does not verify downloaded files if they have been modified as indicated using the If-Modified-Since header, which has unspecified impact and attack vectors.
Reservation
12/19/2013
Disclosure
11/03/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 67671 | Debian apt privileges management | 269 | Unproven | Official fix | CVE-2014-0487 |