CVE-2001-0923

RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2001-10-25

Last modified

2024-08-08

Affected products

• Redhat Package Manager (Redhat)

References

• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000440
• http://www.securityfocus.com/archive/1/222542
• http://www.securityfocus.com/bid/3472
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7349