CVE-2009-1300
UnknownEPSS 1.86%
Last modified
CVE-2009-1300 is a vulnerability of currently unknown severity. apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight.. EPSS estimates a 1.86% chance of exploitation in the next 30 days.
Description
apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Debian | Advanced Package Tool | 0.7.20 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2009-1300?
apt 0.7.20 does not check when the date command returns an "invalid date" error, which can prevent apt from loading security updates in time zones for which DST occurs at midnight.
How severe is CVE-2009-1300?
Severity scoring for CVE-2009-1300 is pending analysis. The EPSS model estimates a 1.86% probability of exploitation in the next 30 days.
How do I fix CVE-2009-1300?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2009
- CVE-2009-1294Multiple cross-site scripting (XSS) vulnerabilities in web/g…
- CVE-2009-1295Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on …
- CVE-2009-1296The eCryptfs support utilities (ecryptfs-utils) 73-0ubuntu6.…
- CVE-2009-1297iscsi_discovery in open-iscsi in SUSE openSUSE 10.3 through …
- CVE-2009-1298The ip_frag_reasm function in net/ipv4/ip_fragment.c in the …
- CVE-2009-1299The pa_make_secure_dir function in core-util.c in PulseAudio…
- CVE-2009-1301Integer signedness error in the store_id3_text function in t…
- CVE-2009-1302The browser engine in Mozilla Firefox 3.x before 3.0.9, Thun…
- CVE-2009-1303The browser engine in Mozilla Firefox before 3.0.9, Thunderb…
- CVE-2009-1304The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, T…
- CVE-2009-1305The JavaScript engine in Mozilla Firefox before 3.0.9, Thund…
- CVE-2009-1306The jar: URI implementation in Mozilla Firefox before 3.0.9,…
Are you affected by CVE-2009-1300?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST