Vulnerability Details CVE-2001-0923
RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.1%
CVSS Severity
CVSS v2 Score 7.2
References
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000440
- http://www.securityfocus.com/archive/1/222542
- http://www.securityfocus.com/bid/3472
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7349
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000440
- http://www.securityfocus.com/archive/1/222542
- http://www.securityfocus.com/bid/3472
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7349
Products affected by CVE-2001-0923
-
cpe:2.3:a:redhat:redhat_package_manager:4.0.2-71
-
cpe:2.3:a:redhat:redhat_package_manager:4.0.2-72