NVD

Id
41491  
Name
CVE-2013-6435  
Description
Race condition in RPM 4.11.1 and earlier allows remote attackers to execute arbitrary code via a crafted RPM file whose installation extracts the contents to temporary files before validating the signature, as demonstrated by installing a file in the /etc/cron.d directory.  
Reject
 
CVSS Version
2  
CVSS Score
7.6  
Severity
High  
CVSS Base Score
7.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2014-12-16  
Modified Date
2016-12-07  
Seq
2013-6435  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
209655 41491 CVE-2013-6435 http://advisories.mageia.org/MGASA-2014-0529.html  View
209656 41491 CVE-2013-6435 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
209657 41491 CVE-2013-6435 RHSA-2014:1974  View
209658 41491 CVE-2013-6435 RHSA-2014:1975  View
209659 41491 CVE-2013-6435 RHSA-2014:1976  View
209660 41491 CVE-2013-6435 DSA-3129  View
209661 41491 CVE-2013-6435 MDVSA-2014:251  View
209662 41491 CVE-2013-6435 MDVSA-2015:056  View
209663 41491 CVE-2013-6435 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
209664 41491 CVE-2013-6435 71558  View
209665 41491 CVE-2013-6435 https://bugzilla.redhat.com/show_bug.cgi?id=1039811  View
209666 41491 CVE-2013-6435 https://securityblog.redhat.com/2014/12/10/analysis-of-the-cve-2013-6435-flaw-in-rpm/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25126 JVNDB-2013-006703 RPM における任意のコードを実行される脆弱性 RPM には、競合状態により、任意のコードを実行される脆弱性が存在します。 CVE-2013-6435 66377 CVE-2013-6435 41491 7.6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006703.html 2013-12-09 2016-02-10 View