Unscored severity · published Apr 16, 2009
CVE-2009-1300
apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight
–
CVSS
1.9%
EPSS
No
On KEV
Description
apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AP
Advanced Package Tool · Debian
0.7.20 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1300
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1300
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=523213
secunia.com
http://secunia.com/advisories/34829
secunia.com
http://secunia.com/advisories/34832
secunia.com
http://secunia.com/advisories/34874
www.debian.org
http://www.debian.org/security/2009/dsa-1779
www.openwall.com
http://www.openwall.com/lists/oss-security/2009/04/08/11
More from Advanced Package Tool
8.1
CVE-2019-3462
Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to…
5.9
CVE-2018-0501
The mirror:// method implementation in Advanced Package Tool (APT) 1.6.x before 1.6.4 and 1.7.x before 1.7.0~alpha3 mishandles gpg signature verification for the InRelease file of…
5.9
CVE-2016-1252
The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu 14.04 LTS before 1.0.1ubuntu2.17, in Ubuntu 16.04 LTS before 1.2.15ubuntu0.2, and…
5.7
CVE-2020-27350
APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files apt-pkg/contrib/extracttar.cc, apt-pkg/deb/debfile.cc, and…
3.7
CVE-2011-3374
It was found that apt-key in apt, all versions, do not correctly validate gpg keys with the master keyring, leading to a potential man-in-the-middle attack