Unrated severityNVD Advisory· Published Mar 1, 2014· Updated Jun 16, 2026
CVE-2011-3634
CVE-2011-3634
Description
methods/https.cc in apt before 0.8.11 accepts connections when the certificate host name fails validation and Verify-Host is enabled, which allows man-in-the-middle attackers to obtain repository credentials via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
12cpe:2.3:a:debian:advanced_package_tool:*:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:debian:advanced_package_tool:*:*:*:*:*:*:*:*range: <=0.8.10.3
- cpe:2.3:a:debian:advanced_package_tool:0.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:debian:advanced_package_tool:0.8.0:pre1:*:*:*:*:*:*
- cpe:2.3:a:debian:advanced_package_tool:0.8.0:pre2:*:*:*:*:*:*
- cpe:2.3:a:debian:advanced_package_tool:0.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:debian:advanced_package_tool:0.8.10:*:*:*:*:*:*:*
- cpe:2.3:a:debian:advanced_package_tool:0.8.10.1:*:*:*:*:*:*:*
- cpe:2.3:a:debian:advanced_package_tool:0.8.10.2:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*+ 3 more
- cpe:2.3:o:canonical:ubuntu_linux:10.04:-:lts:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:11.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:8.04:-:lts:*:*:*:*:*
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.