Max Justicz discovered a vulnerability in the APT package manager. APT can merge two different package downloads after an HTTP redirect gives them the same URI. Improper file handling when resuming an HTTP download allows a man-in-the-middle attacker to replace a package after verification, resulting in the execution of arbitrary code as root.... Weiterlesen: DSA-6607-1 apt - security update
Intelligence View
⚡ tsecurity.de Intelligence
DSA-6607-1 apt - security update
Max Justicz discovered a vulnerability in the APT package manager. APT can merge two different package downloads after an HTTP redirect gives them the same…
Intelligence Digest — free The top security news daily · unsubscribe anytime