CVE-2006-5466

MEDIO 5.4CVE-2006-5466 · Published 06/11/2006 · updated 16/06/2026

En resumen

CVE-2006-5466 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a package manager (rpm).
Probabilidad de explotación en los próximos 30 días (EPSS): 3.9%, mayor que el 90.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
package manager rpm	`= 4.4.8`	No fix yet

Description

Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4.8, when the LANG environment variable is set to ru_RU.UTF-8, might allow user-assisted attackers to execute arbitrary code via crafted RPM packages.

References

secunia.com/advisories/22740 · Exploit
secunia.com/advisories/22745 · Patch
secunia.com/advisories/22768
secunia.com/advisories/22854
security.gentoo.org/glsa/glsa-200611-08.xml
securitytracker.com/id
mandriva.com/security/advisories
securityfocus.com/bid/20906
ubuntu.com/usn/usn-378-1 · Patch
vupen.com/english/advisories/2006/4350
bugzilla.redhat.com/bugzilla/show_bug.cgi · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free