CVE-2002-2204

CVE-2002-2204 affects the RPM Package Manager, specifically version 4.0.4 . The vulnerability stems from the default --checksig setting, which verifies a package’s signature validity without listing who signed it, enabling remote attackers to make a malicious package appear to originate from a tr...

CVE-2001-0923

CVE-2001-0923 affects RPM Package Manager 4.0.x through 4.0.2.x and allows an attacker to execute arbitrary code via corrupted data in an RPM file when the file is queried. The NVD/CVE entries provide the vulnerability description and a CVSS v2 base score of 7.2 (HIGH) with LOCAL attack vector, b...