CVE-2010-2199

2010-06-0800:00:00

ubuntu.com

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.3%

JSON

lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of
an executable file during replacement of the file in an RPM package upgrade
or deletion of the file in an RPM package removal, which might allow local
users to bypass intended access restrictions by creating a hard link to a
vulnerable file that has a POSIX ACL, a related issue to CVE-2010-2059.