CVE

Id
33304  
CVE No.
CVE-2008-3187  
Status
Candidate  
Description
zypp-refresh-patches in zypper in SUSE openSUSE 10.2, 10.3, and 11.0 does not ask the user before accepting repository keys, which allows remote repositories to cause a denial of service (package data corruption) via a spoofed key.  
Phase
Assigned (20080716)  
Votes
None (candidate not yet proposed)  
Comments