Computer Security
[EN] securityvulns.ru no-pyccku


Debian Linux reprepro authentication bypass
Published:24.10.2007
Source:
SecurityVulns ID:8288
Type:m-i-t-m
Threat Level:
5/10
Description:Unkonwn package signatures are not checked .
Affected:REPREPRO : reprepro 1.3
CVE:CVE-2007-4739 (reprepro 1.3.0 through 2.2.3 does not properly verify signatures when updating repositories, which allows remote attackers to construct and distribute an ostensibly valid Release.gpg file by signing it with an unknown key, related to the update command.)
Original documentdocumentDEBIAN, [SECURITY] [DSA 1394-1] New reprepro packages fix authentication bypass (24.10.2007)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod