CVE-2010-2199: High severity rpm rpm vulnerability
Common Vulnerabilities and Exposures assigned an identifier CVE-2010-2199 to the following vulnerability:
Name: CVE-2010-2199 URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2199 Assigned: 20100608 Reference: CONFIRM: https://bugzilla.redhat.com/showbug.cgi?id=125517
lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to bypass intended access restrictions by creating a hard link to a vulnerable file that has a POSIX ACL, a related issue to CVE-2010-2059.
See bug #598775 for an initial description and comments of this issue. Because different CVE names were assigned for different, yet related, issues, a separate bug has been filed for this particular issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2199?
CVE-2010-2199 is rated as a high-severity vulnerability that can lead to buffer overflow exploits.
How do I fix CVE-2010-2199?
To fix CVE-2010-2199, you need to upgrade RPM Package Manager to the latest version that has addressed the vulnerability.
Which versions of RPM Package Manager are affected by CVE-2010-2199?
CVE-2010-2199 affects multiple versions of RPM Package Manager, including 1.2, 2.0.1, 3.0.1, and all the way up to 4.4.2.3.
What is the impact of CVE-2010-2199?
The impact of CVE-2010-2199 can result in remote code execution and take control of affected systems.
Is there a workaround for CVE-2010-2199?
While upgrading is the recommended fix, temporarily limiting RPM access may serve as a workaround until a patch is applied.