Unrated severityNVD Advisory· Published Jun 17, 2014· Updated Jun 17, 2026
CVE-2014-0478
CVE-2014-0478
Description
APT before 1.0.4 does not properly validate source packages, which allows man-in-the-middle attackers to download and install Trojan horse packages by removing the Release signature.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.