CVE-2011-3634

EPSS 0.16%

apt - security update

發布日:2014/3/1修改日:2026/4/28

描述

methods/https.cc in apt before 0.8.11 accepts connections when the certificate host name fails validation and Verify-Host is enabled, which allows man-in-the-middle attackers to obtain repository credentials via unspecified vectors.

受影響套件(2)

參考連結(1)