Description
RPM Package Manager 4.0.x through 4.0.2.x allows an attacker to execute arbitrary code via corrupted data in the RPM file when the file is queried.
References
- 20011025 Advisory: Corrupt RPM Query Vulnerability mailing-list
- CLA-2001:440 vendor-advisory
- Linux-rpm-execute-code(7349) vdb-entry
- 3472 vdb-entry