Lucene search
HistoryJun 08, 2010 - 6:30 p.m.
CVE-2010-2197
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
6.4 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
66.2%
rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows user-assisted remote attackers to remove home directories via vectors involving a ;~ (semicolon tilde) sequence in a Name tag.
Affected configurations
Node
rpmrpmMatch1.2
ORrpmrpmMatch1.3
ORrpmrpmMatch1.3.1
ORrpmrpmMatch1.4
ORrpmrpmMatch1.4.2
ORrpmrpmMatch1.4.2\/a
ORrpmrpmMatch1.4.3
ORrpmrpmMatch1.4.4
ORrpmrpmMatch1.4.5
ORrpmrpmMatch1.4.6
ORrpmrpmMatch1.4.7
ORrpmrpmMatch2..4.10
ORrpmrpmMatch2.0
ORrpmrpmMatch2.0.1
ORrpmrpmMatch2.0.2
ORrpmrpmMatch2.0.3
ORrpmrpmMatch2.0.4
ORrpmrpmMatch2.0.5
ORrpmrpmMatch2.0.6
ORrpmrpmMatch2.0.7
ORrpmrpmMatch2.0.8
ORrpmrpmMatch2.0.9
ORrpmrpmMatch2.0.10
ORrpmrpmMatch2.0.11
ORrpmrpmMatch2.1
ORrpmrpmMatch2.1.1
ORrpmrpmMatch2.1.2
ORrpmrpmMatch2.2
ORrpmrpmMatch2.2.1
ORrpmrpmMatch2.2.2
ORrpmrpmMatch2.2.3
ORrpmrpmMatch2.2.3.10
ORrpmrpmMatch2.2.3.11
ORrpmrpmMatch2.2.4
ORrpmrpmMatch2.2.5
ORrpmrpmMatch2.2.6
ORrpmrpmMatch2.2.7
ORrpmrpmMatch2.2.8
ORrpmrpmMatch2.2.9
ORrpmrpmMatch2.2.10
ORrpmrpmMatch2.2.11
ORrpmrpmMatch2.3
ORrpmrpmMatch2.3.1
ORrpmrpmMatch2.3.2
ORrpmrpmMatch2.3.3
ORrpmrpmMatch2.3.4
ORrpmrpmMatch2.3.5
ORrpmrpmMatch2.3.6
ORrpmrpmMatch2.3.7
ORrpmrpmMatch2.3.8
ORrpmrpmMatch2.3.9
ORrpmrpmMatch2.4.1
ORrpmrpmMatch2.4.2
ORrpmrpmMatch2.4.3
ORrpmrpmMatch2.4.4
ORrpmrpmMatch2.4.5
ORrpmrpmMatch2.4.6
ORrpmrpmMatch2.4.8
ORrpmrpmMatch2.4.9
ORrpmrpmMatch2.4.11
ORrpmrpmMatch2.4.12
ORrpmrpmMatch2.5
ORrpmrpmMatch2.5.1
ORrpmrpmMatch2.5.2
ORrpmrpmMatch2.5.3
ORrpmrpmMatch2.5.4
ORrpmrpmMatch2.5.5
ORrpmrpmMatch2.5.6
ORrpmrpmMatch2.6.7
ORrpmrpmMatch3.0
ORrpmrpmMatch3.0.1
ORrpmrpmMatch3.0.2
ORrpmrpmMatch3.0.3
ORrpmrpmMatch3.0.4
ORrpmrpmMatch3.0.5
ORrpmrpmMatch3.0.6
ORrpmrpmMatch4.0.
ORrpmrpmMatch4.0.1
ORrpmrpmMatch4.0.2
ORrpmrpmMatch4.0.3
ORrpmrpmMatch4.0.4
ORrpmrpmMatch4.1
ORrpmrpmMatch4.3.3
ORrpmrpmMatch4.4.2
ORrpmrpmMatch4.4.2.1
ORrpmrpmMatch4.4.2.2
ORrpmrpmMatch4.4.2.3
Node
rpmrpmRange≤4.8.0
ORrpmrpmMatch4.6.0
ORrpmrpmMatch4.6.1
ORrpmrpmMatch4.7.0
ORrpmrpmMatch4.7.1
ORrpmrpmMatch4.7.2
Related
prion
prion
Design/Logic Flaw
2010-06-08 18:30:00
cve
cve
CVE-2010-2197
2010-06-08 18:30:10
cvelist
cvelist
CVE-2010-2197
2010-06-08 18:00:00
ubuntucve
ubuntucve
CVE-2010-2197
2010-06-08 00:00:00
debiancve
debiancve
CVE-2010-2197
2010-06-08 18:30:10
gentoo
gentoo
RPM: Multiple vulnerabilities
2012-06-24 00:00:00
nessus
nessus
GLSA-201206-26 : RPM: Multiple vulnerabilities
2012-06-25 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201206-26 (RPM)
2012-08-10 00:00:00
Gentoo Security Advisory GLSA 201206-26 (RPM)
2012-08-10 00:00:00
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
6.4 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
66.2%
Related for NVD:CVE-2010-2197