Skip to main content

Aptdaemon

3 CVEs product

Monthly

CVE-2020-15703 Oct 31, 04:15 PyPI LOW POC PATCH Monitor

There is no input validation on the Locale property in an apt transaction. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. Public exploit code available.

Path Traversal Aptdaemon
NVD
CVSS 3.1
3.3
EPSS
0.5%
CVE-2012-0962 Dec 26, 22:55 MEDIUM PATCH This Month

Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys from a keyserver, which allows remote attackers to install arbitrary package repository GPG keys via a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

Information Disclosure Ubuntu Canonical Ubuntu Linux Aptdaemon +1
NVD
CVSS 2.0
4.3
EPSS
0.4%
CVE-2012-0944 Jun 04, 20:55 MEDIUM This Month

Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is not simulated, which allows remote attackers to install arbitrary packages via. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Ubuntu Canonical Ubuntu Linux Aptdaemon +1
NVD
CVSS 2.0
4.3
EPSS
0.5%
EPSS 0% CVSS 3.3
LOW POC PATCH Monitor

There is no input validation on the Locale property in an apt transaction. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. Public exploit code available.

Path Traversal Aptdaemon
NVD
EPSS 0% CVSS 4.3
MEDIUM PATCH This Month

Aptdaemon 0.43 in Ubuntu 11.10 and 12.04 LTS uses short IDs when importing PPA GPG keys from a keyserver, which allows remote attackers to install arbitrary package repository GPG keys via a. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

Information Disclosure Ubuntu Canonical +3
NVD
EPSS 0% CVSS 4.3
MEDIUM This Month

Aptdaemon 0.43 and earlier in Ubuntu 11.04, 11.10, and 12.04 LTS does not authenticate packages when the transaction is not simulated, which allows remote attackers to install arbitrary packages via. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Ubuntu Canonical +3
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy