Vulnerability in Helix Code Gnome Updater

CVE-2000-0722

Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install installation directory before root has begun installing packages.

EPSS: 0.003 (23.4th percentile) — read the EPSS interpretation.

Affected products

Helix_code Gnome_updater — versions 0.1, 0.2, 0.3
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)