Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-1358

EPSS 1.37% · P80
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2009-1358

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
apt apt-get 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
apt是Debian计划合作组织的一个命令行软件包管理器，它提供搜索、管理和查询软件包信息功能。apt-get是其中的一个用于从已验证的源获取软件包和相关信息并对软件包及其依赖进行安 装、升级和删除的软件包。 apt 0.7.21之前版本中存在安全漏洞，该漏洞源于apt-get没有检查来自gpgv的纠错码。攻击者可利用该漏洞诱使apt安装恶意的库。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2009-1358

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2009-1358

请登录查看更多情报信息。

Same Patch Batch · n/a · 2009-04-21 · 26 CVEs total

CVE-2009-1350Novell NetIdentity "xtagent.exe" 远程代码执行漏洞
CVE-2009-1349RedHat C2Net Stronghold Web服务器跨站脚本漏洞
CVE-2009-1266Wireshark 未明漏洞
CVE-2009-0718HP StorageWorks Storage Mirroring 执行任意代码漏洞
CVE-2009-0717HP StorageWorks Storage Mirroring 远程拒绝服务漏洞
CVE-2009-0716HP StorageWorks Storage Mirroring 未明漏洞
CVE-2009-0715HP Storage Essentials "Secure NaviCLI" 未明远程特权提升漏洞
CVE-2009-1356Elecard AVC HD Player '.xpl'文件中远程栈缓冲区溢出漏洞
CVE-2009-1355IBM AIX安全漏洞
CVE-2009-1354Mongoose目录遍历漏洞
CVE-2009-1353Zervit Webserver libz/misc.c栈溢出漏洞
CVE-2009-1352Dawningsoft PowerCHM 栈缓冲区溢出漏洞
CVE-2009-1351Apollo m3u播放列表文件处理堆溢出漏洞
CVE-2006-7238Mark_Girling MyShoutPro跨站脚本攻击漏洞
CVE-2008-6742Gofoxy Foxy P2P 'foxy URI'远程拒绝服务漏洞
CVE-2008-6741Simple Machines Forum 'load.php'SQL注入漏洞
CVE-2008-6740HoMaP-CMS 'plugin_admin.php'PHP远程文件包含漏洞
CVE-2008-6739Todd Woolums ASP下载管理脚本 'setupdownload.asp'授权问题漏洞
CVE-2008-6738Mark_Girling MyShoutPro 'admin_access'Cookie参数身份认证绕过漏洞
CVE-2008-6737Ea Crysis keyexchange报文信息泄露漏洞

Showing top 20 of 26 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2009-1358

No comments yet

Leave a comment