Severity : High Published : 2010-06-08 Modified : 2010-11-06 Base Score : 7.2 Details : lib/fsm.c in RPM 4.8.0 and unspecified 4.7.x and 4.6.x versions, and RPM before 4.4.3, does not properly reset the metadata of an executable file during replacement of the file in an RPM package upgrade, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid or (2) setgid file. Product/Version : Carrier Grade CGE 6.0   Pro 4.x   CGE 4.x   Mobilinux 4.x   Pro 5.0   CGE 5.x   Mobilinux 5.x   Mobilinux 5.0.24   MVL 5 Atom   Pro 5.0.24   MVL 5 OMAP3   MVL 5 OMAP3530   Carrier Grade CGE 6.0

CVE-2010-4819 CVE-2010-4818 CVE-2010-4805 CVE-2010-4668 CVE-2010-4656 CVE-2010-4652 CVE-2010-4649 CVE-2010-4529 CVE-2010-4527 CVE-2010-4526 CVE-2010-4411 CVE-2010-4347 CVE-2010-4346 CVE-2010-4343 CVE-2010-4342 CVE-2010-4263 CVE-2010-4258 CVE-2010-4252 CVE-2010-4251 CVE-2010-4249 CVE-2010-4248 CVE-2010-4242 CVE-2010-4221 CVE-2010-4180 CVE-2010-4175 CVE-2010-4169 CVE-2010-4164 CVE-2010-4162 CVE-2010-4161 CVE-2010-4160 CVE-2010-4158 CVE-2010-4157 CVE-2010-4083 CVE-2010-4081 CVE-2010-4080 CVE-2010-4078 CVE-2010-4076 CVE-2010-4075 CVE-2010-4074 CVE-2010-4073 CVE-2010-4072 CVE-2010-4008 CVE-2010-3880 CVE-2010-3877 CVE-2010-3876 CVE-2010-3875 CVE-2010-3873 CVE-2010-3867 CVE-2010-3864 CVE-2010-3859 CVE-2010-3858 CVE-2010-3856 CVE-2010-3850 CVE-2010-3849 CVE-2010-3848 CVE-2010-3847 CVE-2010-3477 CVE-2010-3442 CVE-2010-3437 CVE-2010-3433 CVE-2010-3432 CVE-2010-3316 CVE-2010-3311 CVE-2010-3310 CVE-2010-3297 CVE-2010-3296 CVE-2010-3086 CVE-2010-3084 CVE-2010-3081 CVE-2010-3080 CVE-2010-3079 CVE-2010-3078 CVE-2010-3069 CVE-2010-3067 CVE-2010-3015 CVE-2010-2963 CVE-2010-2954 CVE-2010-2949 CVE-2010-2948 CVE-2010-2946 CVE-2010-2943 CVE-2010-2942 CVE-2010-2939 CVE-2010-2798 CVE-2010-2761 CVE-2010-2653 CVE-2010-2538 CVE-2010-2537 CVE-2010-2531 CVE-2010-2529 CVE-2010-2526 CVE-2010-2524 CVE-2010-2523 CVE-2010-2522 CVE-2010-2521 CVE-2010-2495 CVE-2010-2492 CVE-2010-2484 CVE-2010-2478 CVE-2010-2287 CVE-2010-2284 CVE-2010-2283 CVE-2010-2252 CVE-2010-2249 CVE-2010-2248 CVE-2010-2240 CVE-2010-2233 CVE-2010-2226 CVE-2010-2221 CVE-2010-2199 CVE-2010-2198 CVE-2010-2158 CVE-2010-2067 CVE-2010-2066 CVE-2010-2065 CVE-2010-2059 CVE-2010-1975 CVE-2010-1797 CVE-2010-1748 CVE-2010-1674 CVE-2010-1646 CVE-2010-1643 CVE-2010-1642 CVE-2010-1636 CVE-2010-1623 CVE-2010-1488 CVE-2010-1455 CVE-2010-1450 CVE-2010-1449 CVE-2010-1447 CVE-2010-1446 CVE-2010-1437 CVE-2010-1436 CVE-2010-1411 CVE-2010-1205 CVE-2010-1187 CVE-2010-1173 CVE-2010-1172 CVE-2010-1170 CVE-2010-1169 CVE-2010-1168 CVE-2010-1166 CVE-2010-1163 CVE-2010-1162 CVE-2010-1161 CVE-2010-1160 CVE-2010-1088 CVE-2010-1087 CVE-2010-1086 CVE-2010-1084 CVE-2010-1083 CVE-2010-0830 CVE-2010-0743 CVE-2010-0742 CVE-2010-0740 CVE-2010-0731 CVE-2010-0727 CVE-2010-0624 CVE-2010-0622 CVE-2010-0547 CVE-2010-0542 CVE-2010-0540 CVE-2010-0442 CVE-2010-0437 CVE-2010-0434 CVE-2010-0433 CVE-2010-0426 CVE-2010-0421 CVE-2010-0415 CVE-2010-0410 CVE-2010-0405 CVE-2010-0393 CVE-2010-0382 CVE-2010-0296 CVE-2010-0291 CVE-2010-0290 CVE-2010-0205 CVE-2010-0097 CVE-2010-0015 CVE-2010-0008 CVE-2010-0007 CVE-2010-0006 CVE-2010-0003 CVE-2010-0001