Executive Summary

Informations
NameCVE-2010-2198First vendor Publication2010-06-08
VendorCveLast vendor Modification2010-06-09

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score7.2Attack RangeLocal
Cvss Impact Score10Attack ComplexityLow
Cvss Expoit Score3.9AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to gain privileges or bypass intended access restrictions by creating a hard link to a vulnerable file that has (1) POSIX file capabilities or (2) SELinux context information, a related issue to CVE-2010-2059.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2198

CWE : Common Weakness Enumeration

idName
CWE-264Permissions, Privileges, and Access Controls

CPE : Common Platform Enumeration

TypeDescriptionCount
Application93

OpenVAS Exploits

DateDescription
2012-08-10Name : Gentoo Security Advisory GLSA 201206-26 (RPM)
File : nvt/glsa_201206_26.nasl
2010-07-12Name : Fedora Update for rpm FEDORA-2010-10617
File : nvt/gb_fedora_2010_10617_rpm_fc12.nasl
2010-07-12Name : Fedora Update for rpm FEDORA-2010-9829
File : nvt/gb_fedora_2010_9829_rpm_fc13.nasl

Nessus® Vulnerability Scanner

DateDescription
2012-06-25Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201206-26.nasl - Type : ACT_GATHER_INFO
2010-07-08Name : The remote Fedora host is missing a security update.
File : fedora_2010-9829.nasl - Type : ACT_GATHER_INFO
2010-07-07Name : The remote Fedora host is missing a security update.
File : fedora_2010-10617.nasl - Type : ACT_GATHER_INFO

Internal Sources (Detail)

SourceUrl
CONFIRMhttp://rpm.org/gitweb?p=rpm.git;a=commit;h=4d172a194addc49851e558ea390d304589...
https://bugzilla.redhat.com/show_bug.cgi?id=598775
MLISThttp://marc.info/?l=oss-security&m=127559059928131&w=2
http://www.openwall.com/lists/oss-security/2010/06/02/3
http://www.openwall.com/lists/oss-security/2010/06/03/5
http://www.openwall.com/lists/oss-security/2010/06/04/1
OSVDBhttp://www.osvdb.org/65144
SECUNIAhttp://secunia.com/advisories/40028

Alert History

If you want to see full details history, please login or register.
0
1
DateInformations
2014-02-17 10:55:52
  • Multiple Updates
2013-05-10 23:26:45
  • Multiple Updates