Lucene search

K
ubuntucveUbuntu.comUB:CVE-2006-5466
HistoryNov 06, 2006 - 12:00 a.m.

CVE-2006-5466

2006-11-0600:00:00
ubuntu.com
ubuntu.com
12

5.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

0.03 Low

EPSS

Percentile

90.8%

Heap-based buffer overflow in the showQueryPackage function in librpm in
RPM Package Manager 4.4.8, when the LANG environment variable is set to
ru_RU.UTF-8, might allow user-assisted attackers to execute arbitrary code
via crafted RPM packages.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchrpm< 4.4.1-5ubuntu2.1UNKNOWN
ubuntu6.10noarchrpm< 4.4.1-9.1ubuntu0.1UNKNOWN
ubuntu7.04noarchrpm< 4.4.1-14build1UNKNOWN

5.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:N/I:N/A:C

0.03 Low

EPSS

Percentile

90.8%