low2.1
CVE-2013-1764
The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method.
Impact
The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Packagekit Project | Packagekit | through 0.8.7 Versions 0.8.1, 0.8.2, 0.8.3, 0.8.4, 0.8.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00026.html
- http://www.openwall.com/lists/oss-security/2013/02/25/20
- https://bugs.freedesktop.org/show_bug.cgi?id=61231
- https://bugzilla.novell.com/show_bug.cgi?id=804983
- https://gitorious.org/packagekit/packagekit/commit/d3d14631042237bcfe6fb30a60e59bb6d94af425
- https://gitorious.org/packagekit/packagekit/source/NEWS
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00026.html
- http://www.openwall.com/lists/oss-security/2013/02/25/20
- https://bugs.freedesktop.org/show_bug.cgi?id=61231
- https://bugzilla.novell.com/show_bug.cgi?id=804983
- https://gitorious.org/packagekit/packagekit/commit/d3d14631042237bcfe6fb30a60e59bb6d94af425
- https://gitorious.org/packagekit/packagekit/source/NEWS