CVE-2010-2199

🗓️ 08 Jun 2010 18:30:00Reported by ubuntu.comType

lib/fsm.c does not reset file metadata during upgrade or deletion in RPM, allowing users to bypass access restrictions by creating a hard link to a vulnerable file with a POSIX ACL

Reporter	Title	Published	Views	Family All 28
BDU FSTEC	Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
Tenable Nessus	CentOS 4 : rpm (CESA-2010:0678)	12 Sep 201000:00	–	nessus
Tenable Nessus	CentOS 5 : rpm (CESA-2010:0679)	13 Sep 201000:00	–	nessus
Tenable Nessus	GLSA-201206-26 : RPM: Multiple vulnerabilities	25 Jun 201200:00	–	nessus
Tenable Nessus	Oracle Linux 4 : rpm (ELSA-2010-0678)	12 Jul 201300:00	–	nessus
Tenable Nessus	RHEL 4 : rpm (RHSA-2010:0678)	8 Sep 201000:00	–	nessus
Tenable Nessus	RHEL 5 : rpm (RHSA-2010:0679)	8 Sep 201000:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2010-2199	24 Aug 202500:00	–	nessus
Tenable Nessus	VMSA-2011-0004 : VMware ESX/ESXi SLPD denial of service vulnerability and ESX third-party updates for Service Console packages bind, pam, and rpm.	8 Mar 201100:00	–	nessus
Tenable Nessus	VMware ESX / ESXi Third-Party Libraries Multiple Vulnerabilities (VMSA-2011-0004) (remote check)	4 Mar 201600:00	–	nessus

Source	Link
cve	www.cve.org/CVERecord

24 Jul 2024 15:57Current

7High risk

Vulners AI Score7

CVSS 27.2

EPSS0.00051