PT-2001-2077 · Rpm · Rpm Package Manager

Published 2001-10-25 · Updated 2017-12-19 · CVE-2001-0923

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RPM Package Manager versions 4.0.x through 4.0.2.x

Description The issue allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried.

Recommendations For versions 4.0.x through 4.0.2.x, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2001-0923

Affected Products

Rpm Package Manager

References · 5

• 🔥 http://securityfocus.com/archive/1/222542 · Exploit
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000440 · Vendor Advisory
• http://securityfocus.com/bid/3472 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0923 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7349 · Note