Title : Debian Security Update Fixes reprepro Signature Validation Weakness VUPEN ID : VUPEN/ADV-2007-3602 CVE ID : CVE-2007-4739
Rated as : Low Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2007-10-25
Technical Description
A vulnerability has been identified in Debian, which could be exploited by attackers to bypass security restrictions. This issue is caused by an error in reprepro that does not properly validate signatures when updating repositories, which could be exploited by malicious people to bypass secuity checks.
