Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
lib/fsm.c in RPM 4.8.0 and earlier does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade or deletion of the file in an RPM package removal, which might allow local users to bypass intended access restrictions by creating a hard link to a vulnerable file that has a POSIX ACL, a related issue to CVE-2010-2059.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RPM 'lib/fsm.c'访问控制绕过漏洞
Vulnerability Description
RPM软件包升级对文件进行替换或删除时,RPM的lib/fsm.c没有正确的重置可执行文件的元数据,本地用户可以通过创建包含POSIX ACL的易受攻击文件的hard链接,绕开访问控制。
CVSS Information
N/A
Vulnerability Type
N/A