The rpmpkgRead function in lib/package.c in RPM 4.10.x before 4.10.2 does not return an error code in certain situations involving an "unparseable signature," which allows remote attackers to bypass RPM signature checks via a crafted package.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2013-01-18T11:00:00
Updated: 2017-08-28T12:57:01
Reserved: 2012-12-06T00:00:00
Link: CVE-2012-6088
JSON object: View
NVD Information
Status : Modified
Published: 2013-01-18T11:48:41.057
Modified: 2023-02-13T04:37:55.103
Link: CVE-2012-6088
JSON object: View
Redhat Information
No data.
CWE