Unscored severity · published Jun 8, 2010
CVE-2005-4889
lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in an RPM package removal, which might allow local users to…
–
CVSS
0.3%
EPSS
No
On KEV
Description
lib/fsm.c in RPM before 4.4.3 does not properly reset the metadata of an executable file during deletion of the file in an RPM package removal, which might allow local users to gain privileges by creating a hard link to a vulnerable (1) setuid or (2) setgid file, a related issue to CVE-2010-2059.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RP
Rpm · Rpm
through 4.4.2.3; 1.2; 1.3; 1.3.1; 1.4; 1.4.2; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-4889
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-4889
Patch
http://distrib-coffee.ipsl.jussieu.fr/pub/mirrors/rpm/files/rpm/rpm-4.4/rpm-4.4.3.tar.gz
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2010:180
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=125517
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=598775
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/59426
More from Rpm
7.8
CVE-2017-7500
It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an…
7.8
CVE-2017-7501
It was found that versions of rpm before 4.13.0.2 use temporary files with predictable names when installing an RPM
7.0
CVE-2021-20271
A flaw was found in RPM's signature check functionality when reading a package file
6.7
CVE-2021-35939
It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created
6.7
CVE-2021-35938
A symbolic link issue was found in rpm