製品・ソフトウェアに関する情報
Vulnerability Search
apt の apt-get における悪意のあるリポジトリをインストールされる脆弱性
Title apt の apt-get における悪意のあるリポジトリをインストールされる脆弱性
Summary

apt の apt-get には、gpgv から正しいエラーコードをチェックしないため、失効または期限切れの鍵で署名されているレポジトリを有効とみなし、apt に悪意のあるリポジトリをインストールされる脆弱性が存在します。

Possible impacts 第三者により、apt に悪意のあるリポジトリをインストールされる可能性があります。
Solution

ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date July 14, 2007, midnight
Registration Date June 26, 2012, 4:10 p.m.
Last Update June 26, 2012, 4:10 p.m.
CVSS2.0 : 危険
Score 10
Vector AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected System
Debian
apt 0.7.21 未満
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
ベンダー情報
Change Log
No Changed Details Date of change
0 [2012年06月26日]
  掲載		 Feb. 17, 2018, 10:37 a.m.
NVD Vulnerability Information
CVE-2009-1358
Summary

apt-get in apt before 0.7.21 does not check for the correct error code from gpgv, which causes apt to treat a repository as valid even when it has been signed with a key that has been revoked or expired, which might allow remote attackers to trick apt into installing malicious repositories.

Publication Date April 22, 2009, 8:30 a.m.
Registration Date Jan. 29, 2021, 1:17 p.m.
Last Update Jan. 9, 2020, 12:11 a.m.
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:a:debian:advanced_package_tool:0.7.0:*:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.1:*:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.2:*:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.2-0.1:*:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.10:*:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.11:*:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.12:*:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.13:*:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.14:*:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.15:*:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.15:exp1:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.15:exp2:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.15:exp3:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.16:*:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.17:*:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.17:exp1:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.17:exp2:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.17:exp3:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.17:exp4:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.18:*:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.19:*:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:*:*:*:*:*:*:*:* 0.7.20
cpe:2.3:a:debian:advanced_package_tool:0.7.20.1:*:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.20.2:*:*:*:*:*:*:*
cpe:2.3:a:debian:advanced_package_tool:0.7.21:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.0.1:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.0.2:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.0.3:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.0.4:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.0.5:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.0.6:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.0.7:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.0.8:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.0.9:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.0.10:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.0.11:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.0.12:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.0.13:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.0.13-bo1:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.0.14:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.0.15:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.0.15-0.1bo:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.0.15-0.2bo:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.0.16-1:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.0.17-1:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.1:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.1.1:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.1.3:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.1.5:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.1.6:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.1.7:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.1.9:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.3.0:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.3.1:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.3.2:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.3.3:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.3.4:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.3.6:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.3.7:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.3.9:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.3.11:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.3.12:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.3.13:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.3.14:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.3.15:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.3.16:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.3.17:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.3.18:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.3.19:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.0:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.1:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.2:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.3:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.4:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.5:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.5.1:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.6:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.7:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.8:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.9:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.10:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.11:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.12:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.13:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.14:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.15:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.16:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.17:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.18:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.19:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.20:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.21:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.22:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.23:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.24:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.25:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.26:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.27:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.28:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.29:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.30:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.30:ubuntu1:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.30:ubuntu2:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.31:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.5.32:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.0:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.1:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.2:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.3:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.4:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.5:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.6:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.7:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.8:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.9:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.10:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.11:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.12:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.13:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.14:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.15:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.16:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.17:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.18:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.19:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.20:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.21:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.22:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.23:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.24:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.25:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.27:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.27:ubuntu1:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.27:ubuntu2:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.27:ubuntu3:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.27:ubuntu4:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.28:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.29:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.30:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.31:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.32:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.33:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.34:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.35:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.36:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.36:ubuntu1:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.37:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.38:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.39:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.40:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.40.1:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.41:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.42:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.42.1:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.42.2:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.42.3:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.43:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.43.1:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.43.2:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.43.3:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.44:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.44.1:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.44.1-0.1:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.44.2:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.44.2:exp1:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.45:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.46:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.46.1:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.46.2:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.46.3:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.46.3-0.1:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.46.3-0.2:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.6.46.4-0.1:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.7.3:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.7.4:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.7.5:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.7.6:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.7.7:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.7.8:*:*:*:*:*:*:*
cpe:2.3:a:debian:apt:0.7.9:*:*:*:*:*:*:*
Related information, measures and tools
Common Vulnerabilities List