Lucene search

K
ubuntuUbuntuUSN-378-1
HistoryNov 04, 2006 - 12:00 a.m.

RPM vulnerability

2006-11-0400:00:00
ubuntu.com
23

7.2 High

AI Score

Confidence

Low

5.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

0.03 Low

EPSS

Percentile

90.8%

Releases

  • Ubuntu 6.10
  • Ubuntu 6.06

Details

An error was found in the RPM library’s handling of query reports. In
some locales, certain RPM packages would cause the library to crash. If
a user was tricked into querying a specially crafted RPM package, the
flaw could be exploited to execute arbitrary code with the user’s
privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchlibrpm4< 4.4.1-9.1ubuntu0.1UNKNOWN
Ubuntu6.06noarchlibrpm4< 4.4.1-5ubuntu2.1UNKNOWN

7.2 High

AI Score

Confidence

Low

5.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

0.03 Low

EPSS

Percentile

90.8%