7.2high
CVE-2005-4889
lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in an RPM package remo…
Published 16 y ago · modified 4 mo ago · JSON
CVSS
7.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.3%
percentile 25%
Public exploits
0
none known
Summary
lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in an RPM package removal, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid or (2) setgid file, a related issue to CVE-2010-2059.
Exploit prediction (EPSS)
0.32% probability of exploitation in the next 30 days, higher than 25% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
- CWE-264 Permissions, Privileges, and Access Controls
References
- distrib-coffee.ipsl.jussieu.fr /pub/mirrors/rpm/files/rpm/rpm-4.4/rpm-4.4.3.tar.gz · x_refsource_CONFIRM, x_transferred
- mandriva.com /security/advisories?name=MDVSA-2010:180 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
- bugzilla.redhat.com /show_bug.cgi?id=598775 · x_refsource_CONFIRM, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/59426 · vdb-entry, x_refsource_XF, x_transferred
- bugzilla.redhat.com /show_bug.cgi?id=125517 · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2005-4889
- NVD: CVE-2005-4889
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.