Apt Product Vulnerability in Ubuntu and Debian due to Invalid Date Handling
CVE-2009-1300
Currently unrated
What is CVE-2009-1300?
The Apt package manager version 0.7.20 on Ubuntu and Debian systems fails to validate the return of the date command when it encounters an 'invalid date' error. This oversight can hinder the timely loading of security updates, particularly in time zones experiencing daylight saving time (DST) transitions at midnight. Consequently, users may face increased risk of exposure to security threats, as the system is unable to apply critical updates as needed. System administrators should ensure that their package managers are updated to mitigate this risk.