Vulnerability Details CVE-2009-1300
apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 76.9%
CVSS Severity
CVSS v2 Score 10.0
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=523213
- http://secunia.com/advisories/34829
- http://secunia.com/advisories/34832
- http://secunia.com/advisories/34874
- http://www.debian.org/security/2009/dsa-1779
- http://www.openwall.com/lists/oss-security/2009/04/08/11
- https://bugs.launchpad.net/ubuntu/+source/coreutils/+bug/354793
- https://usn.ubuntu.com/762-1/
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=523213
- http://secunia.com/advisories/34829
- http://secunia.com/advisories/34832
- http://secunia.com/advisories/34874
- http://www.debian.org/security/2009/dsa-1779
- http://www.openwall.com/lists/oss-security/2009/04/08/11
- https://bugs.launchpad.net/ubuntu/+source/coreutils/+bug/354793
- https://usn.ubuntu.com/762-1/
Products affected by CVE-2009-1300
-
cpe:2.3:a:debian:advanced_package_tool:0.7.20