Vulnerability in Rpm Package Manager
CVE-2006-5466
Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4.8, when the LANG environment variable is set to ru_RU.UTF-8, might allow user-assisted attackers to execute arbitrary code via crafted RPM packages.
EPSS: 0.036 (88.2th percentile) — read the EPSS interpretation.
Affected products
- Rpm Package_manager — versions 4.4.8
- Ubuntu Ubuntu_linux — versions 6.06_lts, 6.10
- N/a — versions n/a
References
- secalert@redhat.com (vendor-advisory, x_refsource_GENTOO)
- secalert@redhat.com (Exploit, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory, Patch)
- secalert@redhat.com (Exploit, x_refsource_MISC)
- secalert@redhat.com (vdb-entry, x_refsource_SECTRACK)
- secalert@redhat.com (vendor-advisory, x_refsource_MANDRIVA)
- secalert@redhat.com (vdb-entry, x_refsource_BID)
- secalert@redhat.com (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)