Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
Related vulnerabilities
BDU:2015-03030 (CVE-2009-1300)
Vulnerability from fstec – Published: 2015-04-28 – Updated: 2024-07-05 – View on bdu.fstec.ru No remediation information
VLAI
Title
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
Summary
Множественные уязвимости пакета apt-transport-https операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно
Severity
Status
Potential vulnerability
Exploitation
Resource manipulation
Incidents
Being clarified
Remediation
Being clarified
CWE
- CWE-20 - Недостаточная проверка вводимых данных
Aliases
References
Impacted products
1 product
from 1 vendor
Vendors
Сообщество свободного программного обеспечения
Products
Debian GNU/Linux
Versions
до 4 (Debian GNU/Linux)
Product types
Operating system
Mitigations
Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
apt - 0.6.46.4-0.1+etch1
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
s390x:
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
i686:
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt-utils - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
sparc:
apt - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt-utils - 0.6.46.4-0.1+etch1
x86-64:
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
alpha:
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
ia64:
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
mips:
apt - 0.6.46.4-0.1+etch1
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
noarch:
apt-doc - 0.6.46.4-0.1+etch1
libapt-pkg-doc - 0.6.46.4-0.1+etch1
mipsel:
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt-utils - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
arm:
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
Debian GNU/Linux 5:
ppc:
apt - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
s390x:
apt-transport-https - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
i686:
apt - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
sparc:
apt - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
x86-64:
apt-utils - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
armel:
apt-utils - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
alpha:
apt-transport-https - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
ia64:
apt-transport-https - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
mips:
apt-transport-https - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
noarch:
apt-doc - 0.7.20.2+lenny1
libapt-pkg-doc - 0.7.20.2+lenny1
mipsel:
libapt-pkg-dev - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
arm:
apt-utils - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt - 0.7.20.2+lenn
{
"CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 4 (Debian GNU/Linux)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 4:\n\tppc:\n\t\tapt - 0.6.46.4-0.1+etch1\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\ts390x:\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\ti686:\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\tsparc:\n\t\tapt - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\tx86-64:\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\talpha:\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\tia64:\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\tmips:\n\t\tapt - 0.6.46.4-0.1+etch1\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\tnoarch:\n\t\tapt-doc - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-doc - 0.6.46.4-0.1+etch1\n\tmipsel:\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\tarm:\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\nDebian GNU/Linux 5:\n\tppc:\n\t\tapt - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\ts390x:\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\ti686:\n\t\tapt - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\tsparc:\n\t\tapt - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\tx86-64:\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\tarmel:\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\talpha:\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\tia64:\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\tmips:\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\tnoarch:\n\t\tapt-doc - 0.7.20.2+lenny1\n\t\tlibapt-pkg-doc - 0.7.20.2+lenny1\n\tmipsel:\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\tarm:\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenn",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "16.04.2009",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "05.07.2024",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "28.04.2015",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-03030",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2009-1300, CVE-2009-1358, DSA-1779, ID:1401331",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 apt-transport-https \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1779/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1300\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1358",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10)"
}
BDU:2015-03031 (CVE-2009-1300)
Vulnerability from fstec – Published: 2015-04-28 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
Summary
Множественные уязвимости пакета apt-utils операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно
Severity
Status
Confirmed by the vendor
Exploitation
Resource manipulation
Incidents
Being clarified
Remediation
Being clarified
CWE
- CWE-20 - Недостаточная проверка вводимых данных
Aliases
References
Impacted products
1 product
from 1 vendor
Vendors
Сообщество свободного программного обеспечения
Products
Debian GNU/Linux
Versions
до 4 (Debian GNU/Linux)
Product types
Operating system
Mitigations
Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
apt - 0.6.46.4-0.1+etch1
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
s390x:
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
i686:
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt-utils - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
sparc:
apt - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt-utils - 0.6.46.4-0.1+etch1
x86-64:
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
alpha:
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
ia64:
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
mips:
apt - 0.6.46.4-0.1+etch1
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
noarch:
apt-doc - 0.6.46.4-0.1+etch1
libapt-pkg-doc - 0.6.46.4-0.1+etch1
mipsel:
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt-utils - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
arm:
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
Debian GNU/Linux 5:
ppc:
apt - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
s390x:
apt-transport-https - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
i686:
apt - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
sparc:
apt - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
x86-64:
apt-utils - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
armel:
apt-utils - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
alpha:
apt-transport-https - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
ia64:
apt-transport-https - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
mips:
apt-transport-https - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
noarch:
apt-doc - 0.7.20.2+lenny1
libapt-pkg-doc - 0.7.20.2+lenny1
mipsel:
libapt-pkg-dev - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
arm:
apt-utils - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt - 0.7.20.2+lenn
{
"CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 4 (Debian GNU/Linux)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 4:\n\tppc:\n\t\tapt - 0.6.46.4-0.1+etch1\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\ts390x:\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\ti686:\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\tsparc:\n\t\tapt - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\tx86-64:\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\talpha:\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\tia64:\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\tmips:\n\t\tapt - 0.6.46.4-0.1+etch1\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\tnoarch:\n\t\tapt-doc - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-doc - 0.6.46.4-0.1+etch1\n\tmipsel:\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\tarm:\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\nDebian GNU/Linux 5:\n\tppc:\n\t\tapt - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\ts390x:\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\ti686:\n\t\tapt - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\tsparc:\n\t\tapt - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\tx86-64:\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\tarmel:\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\talpha:\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\tia64:\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\tmips:\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\tnoarch:\n\t\tapt-doc - 0.7.20.2+lenny1\n\t\tlibapt-pkg-doc - 0.7.20.2+lenny1\n\tmipsel:\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\tarm:\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenn",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "28.04.2015",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-03031",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2009-1300, CVE-2009-1358, DSA-1779, ID:1401331",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 apt-utils \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1779/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1300\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1358",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10)"
}
BDU:2015-03032 (CVE-2009-1300)
Vulnerability from fstec – Published: 2015-04-28 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
Summary
Множественные уязвимости пакета libapt-pkg-dev операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно
Severity
Status
Confirmed by the vendor
Exploitation
Resource manipulation
Incidents
Being clarified
Remediation
Being clarified
CWE
- CWE-20 - Недостаточная проверка вводимых данных
Aliases
References
Impacted products
1 product
from 1 vendor
Vendors
Сообщество свободного программного обеспечения
Products
Debian GNU/Linux
Versions
до 4 (Debian GNU/Linux)
Product types
Operating system
Mitigations
Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
apt - 0.6.46.4-0.1+etch1
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
s390x:
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
i686:
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt-utils - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
sparc:
apt - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt-utils - 0.6.46.4-0.1+etch1
x86-64:
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
alpha:
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
ia64:
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
mips:
apt - 0.6.46.4-0.1+etch1
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
noarch:
apt-doc - 0.6.46.4-0.1+etch1
libapt-pkg-doc - 0.6.46.4-0.1+etch1
mipsel:
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt-utils - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
arm:
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
Debian GNU/Linux 5:
ppc:
apt - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
s390x:
apt-transport-https - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
i686:
apt - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
sparc:
apt - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
x86-64:
apt-utils - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
armel:
apt-utils - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
alpha:
apt-transport-https - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
ia64:
apt-transport-https - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
mips:
apt-transport-https - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
noarch:
apt-doc - 0.7.20.2+lenny1
libapt-pkg-doc - 0.7.20.2+lenny1
mipsel:
libapt-pkg-dev - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
arm:
apt-utils - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt - 0.7.20.2+lenn
{
"CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 4 (Debian GNU/Linux)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 4:\n\tppc:\n\t\tapt - 0.6.46.4-0.1+etch1\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\ts390x:\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\ti686:\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\tsparc:\n\t\tapt - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\tx86-64:\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\talpha:\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\tia64:\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\tmips:\n\t\tapt - 0.6.46.4-0.1+etch1\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\tnoarch:\n\t\tapt-doc - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-doc - 0.6.46.4-0.1+etch1\n\tmipsel:\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\tarm:\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\nDebian GNU/Linux 5:\n\tppc:\n\t\tapt - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\ts390x:\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\ti686:\n\t\tapt - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\tsparc:\n\t\tapt - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\tx86-64:\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\tarmel:\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\talpha:\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\tia64:\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\tmips:\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\tnoarch:\n\t\tapt-doc - 0.7.20.2+lenny1\n\t\tlibapt-pkg-doc - 0.7.20.2+lenny1\n\tmipsel:\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\tarm:\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenn",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "28.04.2015",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-03032",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2009-1300, CVE-2009-1358, DSA-1779, ID:1401331",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libapt-pkg-dev \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1779/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1300\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1358",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10)"
}
BDU:2015-03033 (CVE-2009-1300)
Vulnerability from fstec – Published: 2015-04-28 – Updated: 2016-11-28 – View on bdu.fstec.ru Fixed
VLAI
Title
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
Summary
Множественные уязвимости пакета libapt-pkg-doc операционной системы Debian GNU/Linux, эксплуатация которых может привести к нарушению конфиденциальности, целостности и доступности защищаемой информации. Эксплуатация уязвимостей может быть осуществлена удаленно
Severity
Status
Confirmed by the vendor
Exploitation
Resource manipulation
Incidents
Being clarified
Remediation
Being clarified
CWE
- CWE-20 - Недостаточная проверка вводимых данных
Aliases
References
Impacted products
1 product
from 1 vendor
Vendors
Сообщество свободного программного обеспечения
Products
Debian GNU/Linux
Versions
до 4 (Debian GNU/Linux)
Product types
Operating system
Mitigations
Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
apt - 0.6.46.4-0.1+etch1
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
s390x:
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
i686:
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt-utils - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
sparc:
apt - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt-utils - 0.6.46.4-0.1+etch1
x86-64:
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
alpha:
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
ia64:
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
mips:
apt - 0.6.46.4-0.1+etch1
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
noarch:
apt-doc - 0.6.46.4-0.1+etch1
libapt-pkg-doc - 0.6.46.4-0.1+etch1
mipsel:
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt-utils - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
arm:
apt-utils - 0.6.46.4-0.1+etch1
libapt-pkg-dev - 0.6.46.4-0.1+etch1
apt - 0.6.46.4-0.1+etch1
Debian GNU/Linux 5:
ppc:
apt - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
s390x:
apt-transport-https - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
i686:
apt - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
sparc:
apt - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
x86-64:
apt-utils - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
armel:
apt-utils - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
alpha:
apt-transport-https - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
ia64:
apt-transport-https - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
mips:
apt-transport-https - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
noarch:
apt-doc - 0.7.20.2+lenny1
libapt-pkg-doc - 0.7.20.2+lenny1
mipsel:
libapt-pkg-dev - 0.7.20.2+lenny1
apt-utils - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
apt - 0.7.20.2+lenny1
arm:
apt-utils - 0.7.20.2+lenny1
apt-transport-https - 0.7.20.2+lenny1
libapt-pkg-dev - 0.7.20.2+lenny1
apt - 0.7.20.2+lenn
{
"CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"CVSS 3.0": null,
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 4 (Debian GNU/Linux)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b:\nDebian GNU/Linux 4:\n\tppc:\n\t\tapt - 0.6.46.4-0.1+etch1\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\ts390x:\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\ti686:\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\tsparc:\n\t\tapt - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\tx86-64:\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\talpha:\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\tia64:\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\tmips:\n\t\tapt - 0.6.46.4-0.1+etch1\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\tnoarch:\n\t\tapt-doc - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-doc - 0.6.46.4-0.1+etch1\n\tmipsel:\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\n\tarm:\n\t\tapt-utils - 0.6.46.4-0.1+etch1\n\t\tlibapt-pkg-dev - 0.6.46.4-0.1+etch1\n\t\tapt - 0.6.46.4-0.1+etch1\nDebian GNU/Linux 5:\n\tppc:\n\t\tapt - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\ts390x:\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\ti686:\n\t\tapt - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\tsparc:\n\t\tapt - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\tx86-64:\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\tarmel:\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\talpha:\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\tia64:\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\tmips:\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\tnoarch:\n\t\tapt-doc - 0.7.20.2+lenny1\n\t\tlibapt-pkg-doc - 0.7.20.2+lenny1\n\tmipsel:\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenny1\n\tarm:\n\t\tapt-utils - 0.7.20.2+lenny1\n\t\tapt-transport-https - 0.7.20.2+lenny1\n\t\tlibapt-pkg-dev - 0.7.20.2+lenny1\n\t\tapt - 0.7.20.2+lenn",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": null,
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "28.11.2016",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "28.04.2015",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2015-03033",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2009-1300, CVE-2009-1358, DSA-1779, ID:1401331",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Debian GNU/Linux",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 libapt-pkg-doc \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Debian\u00a0GNU/Linux, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "http://www.debian.org/security/dsa-1779/\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1300\nhttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1358",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10)"
}