Debian Linux reprepro authentication bypass
Published:		24.10.2007
Source:		BUGTRAQ
SecurityVulns ID:		8288
Type:		m-i-t-m
Level:		5/10
Description:		Unkonwn package signatures are not checked .

Affected:		REPREPRO : reprepro 1.3
CVE:		CVE-2007-4739 (reprepro 1.3.0 through 2.2.3 does not properly verify signatures when updating repositories, which allows remote attackers to construct and distribute an ostensibly valid Release.gpg file by signing it with an unknown key, related to the update command.)

Original document

DEBIAN, [SECURITY] [DSA 1394-1] New reprepro packages fix authentication bypass (24.10.2007)

Discuss:

Read or add your comments to this news (0 comments)