CVE-2005-4889: High severity RPM RPM vulnerability
Common Vulnerabilities and Exposures assigned an identifier CVE-2005-4889 to the following vulnerability:
lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in an RPM package removal, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid or (2) setgid file, a related issue to CVE-2010-2059.
References: https://bugzilla.redhat.com/showbug.cgi?id=125517 https://bugzilla.redhat.com/showbug.cgi?id=598775 http://xforce.iss.net/xforce/xfdb/59426
This issue was fixed in Fedora rpm some time ago via bug #125517. RPM versions in Red Hat Enterprise Linux 3 and 4 do not contain the fix and are affected.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4889?
CVE-2005-4889 has a high severity level due to its potential for privilege escalation.
How do I fix CVE-2005-4889?
To mitigate CVE-2005-4889, upgrade RPM to version 4.4.3 or later.
Which versions of RPM are affected by CVE-2005-4889?
CVE-2005-4889 affects RPM versions earlier than 4.4.3, including versions 4.4.2.2 and prior.
Can a local user exploit CVE-2005-4889 for privilege escalation?
Yes, CVE-2005-4889 allows local users to exploit the vulnerability to gain elevated privileges.
What platforms are impacted by CVE-2005-4889?
CVE-2005-4889 impacts systems using vulnerable RPM versions, particularly on Red Hat Enterprise Linux.