Skip to main content

Rpm CVE-2012-6088

MEDIUM
Credentials Management Errors (CWE-255)
2013-01-18 secalert@redhat.com
Authentication Bypass Rpm
4.3
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:N/I:P/A:N
Attack Vector
Network
Attack Complexity
M
Confidentiality
None
Integrity
P
Availability
None

Lifecycle Timeline

1
CVE Published
Jan 18, 2013 - 11:48 cve.org
MEDIUM 4.3

DescriptionCVE.org

The rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error code in certain situations involving an "unparseable signature," which allows remote attackers to bypass RPM signature checks via a crafted package.

AnalysisAI

The rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error code in certain situations involving an "unparseable signature," which allows remote attackers to bypass. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

Technical ContextAI

This vulnerability is classified under CWE-255. The rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error code in certain situations involving an "unparseable signature," which allows remote attackers to bypass RPM signature checks via a crafted package. Affected products include: Rpm. Version information: before 4.10.2.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Rpm

View all
CVE-2014-8118 CRITICAL
10.0 Dec 16

Integer overflow in RPM 4.12 and earlier allows remote attackers to execute arbitrary code via a crafted CPIO header in

CVE-2013-6435 HIGH
7.6 Dec 16

Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose

CVE-2012-0815 MEDIUM
6.8 Jun 04

The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service
CVE-2017-7501 HIGH
7.8 Nov 22

It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM. Rat
CVE-2012-0061 MEDIUM
6.8 Jun 04

The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-
CVE-2012-0060 MEDIUM
6.8 Jun 04

RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (c
CVE-2021-20271 HIGH
7.0 Mar 26

A flaw was found in RPM's signature check functionality when reading a package file. Rated high severity (CVSS 7.0), thi
CVE-2021-3421 MEDIUM
5.5 May 19

A flaw was found in the RPM package in the read functionality. Rated medium severity (CVSS 5.5), this vulnerability is n
CVE-2021-20266 MEDIUM
4.9 Apr 30

A flaw was found in RPM's hdrblobInit() in lib/header.c. Rated medium severity (CVSS 4.9), this vulnerability is remotel

Same weakness CWE-255 – Credentials Management Errors

View all
CVE-2014-1812 HIGH POC
8.8
CVE-2016-7456 CRITICAL POC
9.8
CVE-2012-1493 HIGH POC
7.8
CVE-2012-4933 HIGH POC
7.8
CVE-2013-4786 HIGH POC
7.5
CVE-2013-3502 MEDIUM POC
6.5
CVE-2015-7251 CRITICAL POC
9.8
CVE-2013-6884 CRITICAL POC
10.0

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2012-6088 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy