CVE-2006-5466: Buffer Overflow
Published Nov 6, 2006
·Updated
Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4.8, when the LANG environment variable is set to ruRU.UTF-8, might allow user-assisted attackers to execute arbitrary code via crafted RPM packages.
Affected Software
3 affected components
RPM Package Manager=4.4.8
Ubuntu Ubuntu Linux=6.06_lts
Ubuntu Ubuntu Linux=6.10
Remediation
Patch Available
Patch Available
Event History
Nov 6, 2006
CVE Published
05:07 PM
Data Sourced
via NVD·05:07 PM
RemedyDescriptionSeverityAffected Software
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-5466?
CVE-2006-5466 is considered a high severity vulnerability due to its potential to execute arbitrary code.
2
How do I fix CVE-2006-5466?
To fix CVE-2006-5466, update the RPM Package Manager to a version that has addressed this vulnerability.
3
Which versions of RPM Package Manager are affected by CVE-2006-5466?
CVE-2006-5466 specifically affects RPM Package Manager version 4.4.8.
4
On which platforms does CVE-2006-5466 affect Ubuntu?
CVE-2006-5466 impacts Ubuntu versions 6.06 LTS and 6.10.
5
What type of vulnerability is CVE-2006-5466?
CVE-2006-5466 is a heap-based buffer overflow vulnerability.