CVE-2007-4739

reprepro 1.3.0 through 2.2.3 does not properly verify signatures when updating repositories, which allows remote attackers to construct and distribute an…

published September 6, 2007

CVSS
—
EPSS
2%
Percentile
74.2
In the wild
Unconfirmed
What it is

reprepro 1.3.0 through 2.2.3 does not properly verify signatures when updating repositories, which allows remote attackers to construct and distribute an ostensibly valid Release.gpg file by signing it with an unknown key, related to the update command.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01516 · 74.2th percentile
Published
2007-09-06T19:00Z
EPSS history
Timeline
  • 06 SEP 19:00Z
    reprepro 1.3.0 through 2.2.3 does not properly verify signatures when updating repositories, which allows remote attackers to construct and distribute an…
    cvelistv5