CVE-2012-6088: Medium severity runit vulnerability
The rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error code in certain situations involving an "unparseable signature," which allows remote attackers to bypass RPM signature checks via a crafted package.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-6088?
CVE-2012-6088 is classified as a high severity vulnerability due to its potential to allow remote attackers to bypass RPM signature checks.
How do I fix CVE-2012-6088?
To fix CVE-2012-6088, you should upgrade to RPM version 4.10.2 or later, which addresses this vulnerability.
Who is affected by CVE-2012-6088?
CVE-2012-6088 affects users of RPM versions 4.10.0 and 4.10.1.
What types of attacks can exploit CVE-2012-6088?
CVE-2012-6088 can be exploited by remote attackers who deliver crafted packages that contain unparseable signatures to bypass signature verification.
What is the impact of CVE-2012-6088 on system security?
The impact of CVE-2012-6088 on system security is significant, as it allows malicious packages to be installed without proper validation, potentially leading to system compromise.