SecuritySpace - CVE-2012-0214

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2012-0214

Description: The pkgAcqMetaClearSig::Failed method in apt-pkg/acquire-item.cc in Advanced Package Tool (APT) 0.8.11 through 0.8.15.10 and 0.8.16 before 0.8.16~exp13, when updating from repositories that use InRelease files, allows man-in-the-middle attackers to install arbitrary packages by preventing a user from downloading the new InRelease file, which leaves the original InRelease file active and makes it more difficult to detect that the Packages file is modified and unsigned.

Test IDs: 1.3.6.1.4.1.25623.1.0.840924 1.3.6.1.4.1.25623.1.0.71715

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2012-0214
http://www.ubuntu.com/usn/USN-1385-1

CVE ID:	CVE-2012-0214
Description:	The pkgAcqMetaClearSig::Failed method in apt-pkg/acquire-item.cc in Advanced Package Tool (APT) 0.8.11 through 0.8.15.10 and 0.8.16 before 0.8.16~exp13, when updating from repositories that use InRelease files, allows man-in-the-middle attackers to install arbitrary packages by preventing a user from downloading the new InRelease file, which leaves the original InRelease file active and makes it more difficult to detect that the Packages file is modified and unsigned.
Test IDs:	1.3.6.1.4.1.25623.1.0.840924 1.3.6.1.4.1.25623.1.0.71715
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2012-0214 http://www.ubuntu.com/usn/USN-1385-1