CVE-2005-4889 in RPM

Resumen (Inglés)

lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in an RPM package removal, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid or (2) setgid file, a related issue to CVE-2010-2059.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

2010-06-08

Divulgación

2010-06-08

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
53489	RPM fsm.c escalada de privilegios	264	No está definido	Arreglo oficial	CVE-2005-4889

Fuentes

• MITRE
• NVD
• CVE Details