CVE-2013-6435

2014-12-16T13:59:00
ID CVE-2013-6435
Type cve
Reporter NVD
Modified 2016-12-07T22:03:57

Description

Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrated by installing a file in the /etc/cron.d directory.