K16383 : Linux RPM vulnerability CVE-2013-6435

Security Advisory Description

Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrated by installing a file in the /etc/cron.d directory
. (
CVE-2013-6435
)
Impact
In normal BIG-IP operation, F5 does not support system administrators installing RPM packages. An attacker with local-only access can trigger this condition. The necessary steps to achieve this condition require that the user have system shell access and the ability to load files onto the BIG-IP system.