NetSight
IP …
high7.6

CVE-2013-6435

Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to t…

Impact

Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrated by installing a file in the /etc/cron.d directory.

Affected products

VendorProductAffected versions
RpmRpm
through 4.11.1
Versions 1.2, 1.3, 1.3.1, 1.4, 1.4.1
DebianDebian Linux
Version 7.0

Weakness classification

CWE-74

References