| Package | Affected versions | Patched versions |
|---|---|---|
| advanced package tool | = 0.8.0= 0.8.1= 0.8.10= 0.8.10.1= 0.8.10.2≤ 0.8.10.3 |
methods/https.cc in apt before 0.8.11 accepts connections when the certificate host name fails validation and Verify-Host is enabled, which allows man-in-the-middle attackers to obtain repository credentials via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free