PT-2010-1141 · Rpm+2 · Rpm+2

Vincent Danen

·

Publicado

2010-06-08

·

Atualizado

2021-08-23

·

CVE-2010-2198

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions RPM versions 4.8.0 and earlier
Description The issue is related to the improper reset of metadata for executable files during RPM package upgrades or removals, potentially allowing local users to gain privileges or bypass access restrictions. This can be achieved by creating a hard link to a vulnerable file with POSIX file capabilities or SELinux context information.
Recommendations For RPM versions 4.8.0 and earlier, update to a version later than 4.8.0 to resolve the issue. As a temporary workaround, consider restricting access to files with POSIX file capabilities or SELinux context information to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

ALT-PU-2016-2427
ALT-PU-2021-2518
ALT-PU-2021-2600
BDU:2015-09653
CVE-2010-2198
ECHO-96ED-6E2A-BA42

Produtos afetados

Alt Linux
Debian
Rpm