CVE-2010-4226: High severity openSUSE openSUSE vulnerability
cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-4226?
CVE-2010-4226 is considered a moderate severity vulnerability due to its potential to allow unauthorized file overwrites.
How do I fix CVE-2010-4226?
To fix CVE-2010-4226, update to the latest version of GNU cpio or the appropriate patched version from your distribution.
What types of systems are affected by CVE-2010-4226?
CVE-2010-4226 affects systems using GNU cpio, specifically openSUSE versions 2007.05.10 and 2010.07.28.
Can CVE-2010-4226 be exploited remotely?
Yes, CVE-2010-4226 can be exploited by remote attackers via a specially crafted RPM package containing symlinks.
What are the potential impacts of CVE-2010-4226?
The potential impact of CVE-2010-4226 includes unauthorized file modifications, which can lead to further vulnerabilities or data loss.