Executive Summary

Informations
Name CVE-2010-2198 First vendor Publication 2010-06-08
Vendor Cve Last vendor Modification 2010-06-09

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score 7.2 Attack Range Local
Cvss Impact Score 10 Attack Complexity Low
Cvss Expoit Score 3.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to gain privileges or bypass intended access restrictions by creating a hard link to a vulnerable file that has (1) POSIX file capabilities or (2) SELinux context information, a related issue to CVE-2010-2059.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2198

CWE : Common Weakness Enumeration

idName
CWE-264Permissions, Privileges, and Access Controls

CPE : Common Platform Enumeration

TypeDescriptionCount
Application93

OpenVAS Exploits

DateDescription
2012-08-10Name : Gentoo Security Advisory GLSA 201206-26 (RPM)
File : nvt/glsa_201206_26.nasl
2010-07-12Name : Fedora Update for rpm FEDORA-2010-10617
File : nvt/gb_fedora_2010_10617_rpm_fc12.nasl
2010-07-12Name : Fedora Update for rpm FEDORA-2010-9829
File : nvt/gb_fedora_2010_9829_rpm_fc13.nasl

Nessus® Vulnerability Scanner

DateDescription
2012-06-25Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201206-26.nasl - Type : ACT_GATHER_INFO
2010-07-08Name : The remote Fedora host is missing a security update.
File : fedora_2010-9829.nasl - Type : ACT_GATHER_INFO
2010-07-07Name : The remote Fedora host is missing a security update.
File : fedora_2010-10617.nasl - Type : ACT_GATHER_INFO

Internal Sources (Detail)

SourceUrl
CONFIRM http://rpm.org/gitweb?p=rpm.git;a=commit;h=4d172a194addc49851e558ea390d304589...
https://bugzilla.redhat.com/show_bug.cgi?id=598775
MLIST http://marc.info/?l=oss-security&m=127559059928131&w=2
http://www.openwall.com/lists/oss-security/2010/06/02/3
http://www.openwall.com/lists/oss-security/2010/06/03/5
http://www.openwall.com/lists/oss-security/2010/06/04/1
OSVDB http://www.osvdb.org/65144
SECUNIA http://secunia.com/advisories/40028

Alert History

If you want to see full details history, please login or register.
0
1
DateInformations
2014-02-17 10:55:52
  • Multiple Updates
2013-05-10 23:26:45
  • Multiple Updates