CVE-2005-2214
apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows...
apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain sensitive information such as passwords.
Exploit likelihood
What each source reports
NVD Score used
apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain sensitive information such as passwords.
- Record
CVE-2005-2214- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain sensitive information such as passwords.
- Record
CVE-2005-2214- Updated
- 2026-11-02
EUVDEUVD-2005-2215 No score
apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain sensitive information such as passwords.
- Record
EUVD-2005-2215- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f7f4-7h2h-h92r No score
apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows...
apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain sensitive information such as passwords.
- Record
GHSA-f7f4-7h2h-h92r- Updated
- 2026-11-02
OSV No score
apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain sensitive information such as passwords.
- Record
CVE-2005-2214- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-2214 No score
apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain sensitive information such as passwords.
- Record
DEBIAN-CVE-2005-2214- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
apt-setupDebian:12 |
All versions, plus listed versions 1:0.1821:0.1831:0.1841:0.1851:0.186 Show 15 moreShow less1:0.1871:0.1881:0.1891:0.1901:0.1911:0.1921:0.1931:0.1941:0.1951:0.1961:0.1971:0.1981:0.1991:0.2001:0.201 |
None known |
apt-setupDebian:13 |
All versions, plus listed versions 1:0.1981:0.1991:0.2001:0.201 |
None known |
apt-setupDebian:14 |
All versions, plus listed versions 1:0.1981:0.1991:0.2001:0.201 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2214 is a medium vulnerability (CVSS 4.6) in Debian Apt-setup, published July 11, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. No source names a fixed version.