Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-6435
HistoryDec 16, 2014 - 12:00 a.m.

CVE-2013-6435

2014-12-1600:00:00
ubuntu.com
ubuntu.com
11

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.091 Low

EPSS

Percentile

94.6%

Race condition in RPM 4.11.1 and earlier allows remote attackers to execute
arbitrary code via a crafted RPM file whose installation extracts the
contents to temporary files before validating the signature, as
demonstrated by installing a file in the /etc/cron.d directory.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchrpm< 4.9.1.1-1ubuntu0.3UNKNOWN
ubuntu14.04noarchrpm< 4.11.1-3ubuntu0.1UNKNOWN
ubuntu14.10noarchrpm< 4.11.2-3ubuntu0.1UNKNOWN

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.091 Low

EPSS

Percentile

94.6%