PT-2010-1141 · Rpm+2 · Rpm+2

Vincent Danen · Published 2010-06-08 · Updated 2021-08-23 · CVE-2010-2198

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RPM versions 4.8.0 and earlier

Description The issue is related to the improper reset of metadata for executable files during RPM package upgrades or removals, potentially allowing local users to gain privileges or bypass access restrictions. This can be achieved by creating a hard link to a vulnerable file with POSIX file capabilities or SELinux context information.

Recommendations For RPM versions 4.8.0 and earlier, update to a version later than 4.8.0 to resolve the issue. As a temporary workaround, consider restricting access to files with POSIX file capabilities or SELinux context information to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

ALT-PU-2016-2427

ALT-PU-2021-2518

ALT-PU-2021-2600

BDU:2015-09653

CVE-2010-2198

ECHO-96ED-6E2A-BA42

Affected Products

Alt Linux

Debian

Rpm

References · 66

• https://nvd.nist.gov/vuln/detail/CVE-2010-2198 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3421 · Security Note
• https://bdu.fstec.ru/vul/2015-05391 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6435 · Security Note
• https://bdu.fstec.ru/vul/2015-04520 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2197 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0060 · Security Note
• https://bdu.fstec.ru/vul/2015-04516 · Security Note
• https://bdu.fstec.ru/vul/2015-06484 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20266 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2199 · Security Note
• https://bdu.fstec.ru/vul/2015-04521 · Security Note
• https://bdu.fstec.ru/vul/2015-04515 · Security Note
• http://secunia.com/advisories/40028 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7501 · Security Note