Vulnerability Details : CVE-2014-0487
APT before 1.0.9 does not verify downloaded files if they have been modified as indicated using the If-Modified-Since header, which has unspecified impact and attack vectors.
Products affected by CVE-2014-0487
- cpe:2.3:a:debian:advanced_package_tool:1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:debian:advanced_package_tool:1.0.7:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2014-0487
0.12%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 28 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2014-0487
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2014-0487
-
http://www.debian.org/security/2014/dsa-3025
Debian -- Security Information -- DSA-3025-1 aptVendor Advisory
-
http://secunia.com/advisories/61275
Sign in
-
http://secunia.com/advisories/61286
Sign in
-
http://ubuntu.com/usn/usn-2348-1
USN-2348-1: APT vulnerabilities | Ubuntu security noticesPatch;Vendor Advisory
Jump to